Attackers mount Magento supply chain attack by compromising FishPig extensions

Web: https://www.helpnetsecurity.com/2022/09/14/fishpig-extensions-compromised/

FishPig, a UK-based company developing extensions for the popular Magento open-source e-commerce platform, has announced that its paid software offerings have been injected with malware after its distribution server was compromised. How the attackers compromised the FishPig extensions Sansec researchers said that the FishPig distribution server was compromised on or before August 19th. “Any Magento store who installed or updated paid Fishpig software since then, is now likely running the Rekoobe malware,” they noted. FishPig … More →

The post …

attack attackers don't miss extensions fishpig linux magento remote access trojan sansec supply supply chain supply chain attack supply chain compromise