Self-Healing Magento Malware Attack
A new self-healing malware has been discovered by Dutch malware experts. This malware targets online stores running on the Magento platform. It starts execution whenever a user places a new order and can self-heal using code hidden in the website’s database.
Though this is not the first time a malware is hiding code within a database of the website, it is certainly the First Magento malware that uses SQL stored procedures.
How it attacks
When a new order is placed by the user, a malicious database trigger (a set of automated SQL operations, also known as a stored procedure) executes before Magento puts together the PHP code and assembles the page.
Although this Magento malware has JS & PHP components that steal users card information, the SQL component is new. According to experts, the SQL portion is there to ensure the malware survives as long as possible.
When experts tried removing the malware it became resilient and began to attack the DB rather than the e-commerce app. The very nature of this malware is extremely complex and may need to be remedied by a certified Magento developer to ensure it is removed completely and effectively.
How to check and fix the malware
One needs to check the hidden malware in the database. As Magento Enterprise and other community extensions contain legitimate triggers. Look for triggers with suspicious SQL code, such as anything containing admin, .js, script or lesser than normal HTML tags. Once found, it needs to be deleted.
For future reference
The entry vector for this malware was a brute force attack on /rss/catalog/notifystock/ in what was previously believed to be a completely secure. This needs to be kept in mind while managing the security of your Magneto store in the future.
Want to get in touch with us?
Magento One Page Checkout Extensions
Magento Fulfillment Solution Providers
|Trial Period||30 Days||30 Days||30 Days||14 Days|
|Support||Free Support(Huge collection of tutorial videos and documentation)||Free Support(Email support for lower packages and Phone support for higher packages)||Free Support with Exceptions(Xpress Setup: $50 up to one hour maximum Random Computer Help: $50/half hour)||Free Support|
|Major shipping carrier integration||Yes(Free Stamps.com & Express 1 Accounts)||Yes||Yes||Yes|
|Batch printing of packing slip and Label||Yes(500 at a time recommended. We can print packing slip and labels separately or altogether)||Yes(1500 - 2000 at a time recommended. They can setup the packing slip for Additional cost) $150/hr)||Yes(1000 at a time recommended. Can print packing slip and label separately or altogether)||Yes(ReadyShipper Plug-in: $29.95/month)|
|Reprint missing label or packing slip||Yes||Yes||Yes||Yes(ReadyShipper Plug-in: $29.95/month)|
|Re-shipping||Yes(Support Void shipment too)||Yes(Support Void shipment too)||Yes(Support Void shipment too)||No|
|Best rate or Service specific rate||Yes(We can do rate shop)||Yes(We can do rate shop. Additional request can be full fill for $150/hr.)||Yes||No|
|Terms and condition (Packing slip customization)||Yes(Include a logo, etc.)||Yes with Exceptions(May need their developer help i.e. $150/hr)||Yes(Include logo and basic template)||Yes(ReadyLabels Plug-in: $17.95 for 200 labels)|
|Legal size peel and stick||Yes(4X6 and support other sizes as well)||Yes(4X6 and support other sizes as well)||Yes(4X6 and support other sizes as well)||Yes(ReadyShipper Plug-in: $29.95/month)|
|Automation of printing of Label and Shipping Label||Yes||Yes||Yes||Yes(ReadyLabels Plug-in: $17.95 for 200 labels)|
|Multi Warehouse||Yes||Yes||Yes(Supports multiple warehouses. Create PDF's and send it to other location)||Yes(ReadyShipper Plug-in: $29.95/month)|
|Sync with Magento||Yes||Yes||Yes||Yes|
|Browser based||Yes||Yes||Yes(Desktop software requires setup and other configuration)||Yes(Desktop software requires setup and other configuration)|
Magento Abandoned Carts Alerts
|Channels supported||eBay, Amazon, etc.||eBay, Amazonwebstore, Amazon, etc.||eBay, Amazon, Rakuten/Play, etc.||Amazon, eBay, Rakuten, etc.|
|eCommerce supported||Magento, WooCommerce, Bigcommerce, etc.||Magento, Bigcommerce, AspDotNetStoreFront, etc.||Magento||Almost all|
|POS||Brightpearl POS||Microsoft RMS||None||Shopify POS|
|Free trial||Yes||None||None||Demo only|
|Pricing starts from||$209||$199||Free||Design your own|
|Intended users||Mid-size and small size business||Mid-size and small size business||Mid-size and small size business||Large enterprise and mid-size business|
|Supported countries||United Kingdom, United States, Australia, Canada||United States||All||Brazil, Canada, China, Europe, Germany, Japan, United Kingdom, United States|
|Supported language||English||English||English||English, Chinese, Dutch, French, German, Italian, Japanese, Portuguese, Spanish|
|Connects with ERP||Yes|
|Paid search marketing||Yes|
|Dashboard and management reports||Yes||Yes||Yes|
|Social media campaign management||Yes|
|Support 3rd party software and tools||Yes||Yes||Yes||Yes|