Online ATM-style scam puts shoppers at risk


Hackers inject malicious code into retailers' websites to steal customers' payment details when they conclude a transaction. — AFP Relaxnews
Online shoppers are at a growing risk from a scam which allows hackers to skim their payment details, cyber security firm Symantec warned on Feb 20.

"Formjacking" is essentially an online version of ATM tampering, which allows thieves to grab the PIN codes of unsuspecting customers.

On the Internet, hackers inject malicious code into retailers' websites to steal customers' payment details when they conclude a transaction, Symantec said in its annual report on cyber security.

Cyber criminals heisted tens of millions of dollars last year thanks to the scheme which targets 4,800 websites every month, it added.

Hackers stole payment details from thousands of British Airways customers in an attack last year.

Formjacking has become a more lucrative option for cyber criminals as the value of cryptocurrency declines, Symantec said.

"Faced with diminishing returns from ransomware and cryptojacking, cyber criminals are doubling down on alternative methods, such as formjacking, to make money," it said.

Cryptojacking attacks steal from cryptocurrency exchanges and ransomware attacks take over computers of businesses and individuals to ransom them for money.

Symantec said it blocked more than 3.7 million formjacking attacks last year. – AFP Relaxnews

Get 20% OFF The Star Digital Access

Monthly Plan

RM 13.90/month

RM 11.12/month

Billed as RM 11.12 for the 1st month, RM 13.90 thereafter.

Best Value

Annual Plan

RM 12.33/month

RM 9.87/month

Billed as RM 118.40 for the 1st year, RM 148 thereafter.

Follow us on our official WhatsApp channel for breaking news alerts and key updates!

Others Also Read