,
7 tweets,
5 min read
Read on Twitter
⚠️ WARNING ⚠️
@Forbes Magazine subscription website (forbesmagazine.com) is infected with #magecart malware.
Exfil domain: fontsawesome[.]gq (🇧🇬)
@urlscanio results: urlscan.io/result/8630561…
Deobfuscated code: pastebin.com/3AR7wQ70
@Forbes Magazine subscription website (forbesmagazine.com) is infected with #magecart malware.
Exfil domain: fontsawesome[.]gq (🇧🇬)
@urlscanio results: urlscan.io/result/8630561…
Deobfuscated code: pastebin.com/3AR7wQ70
@Forbes @urlscanio forbesmagazine.com is back online and we've confirmed the malware has been removed.
If you made a purchase on the site while it was compromised, your credit card information was likely stolen.
If you made a purchase on the site while it was compromised, your credit card information was likely stolen.
@Forbes @urlscanio We've been receiving a lot of questions from reporters regarding this incident. Here's the timeline so far:
On May 14, we noticed the site was compromised around 4:30 AM UTC and notified multiple Forbes contacts via email. At 2:00 PM UTC, the site was taken offline. Around 6:00 PM UTC the website was back online, minus the malware.
On May 15, around 8:30 AM UTC the site was taken offline again. At 10:30 PM UTC the site was briefly back online with a cryptic and concerning message. Shortly thereafter, the website went offline again.
On May 16, at 12:00 AM UTC the site was back online – no malware in place. At 3:15 PM UTC, the site went offline and remains down as of this writing.
forbesmagazine.com remains offline. It's not known if/when the site will be back.
