Web skimming
Tampering with an online shop's payment page so that the card numbers customers type in are also sent to the attacker. It is named after skimming, the copying of card data with a hidden card reader, done here through a website; Japanese notices usually call it tampering with the payment application. The attacker either hides a stealing program in the real page or shows a fake payment form before the card number is entered. The page looks normal either way, so card numbers, expiry dates and security codes are taken without anyone noticing. It often starts with a vulnerability in the shop's CMS or an unauthorized login to its admin screen, and it is behind many card data leaks from Japanese online shops.
More terms on this topic
- API abuse
- Backdoor
- Brute-force attack
- Credential stuffing
- CVE identifier
- Dark web / leak site
- DoS / DDoS attack
- Insider misuse
- Malware / computer virus
- Man-in-the-middle attack
- Misconfiguration
- Misdelivery
- Phishing
- Ransomware
- Spam
- Spoofing
- Unauthorized access, intrusion and compromise
- Unauthorized login / impersonation
- Vulnerability
- Web exploit / SQL injection / XSS
- Zero-day attack