• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Newegg checkout process compromised

Status
Not open for further replies.

Solaris17

Dainty Moderator
Staff member
Joined
Aug 16, 2005
Messages
19,838 (4.12/day)
Likes
6,917
Location
Florida
System Name Venslar
Processor I9 7980XE
Motherboard MSI x299 Tomahawk Arctic
Cooling EKWB L360 R2.0
Memory 32GB Corsair DDR4 3000mhz
Video Card(s) Gigabyte 1080TI
Storage 2x 2TB Micron SSDs | 1x ADATA 128SSD | 1x Drevo 256SSD | 1x 1TB 850 EVO | 1x 250GB 960 EVO
Display(s) 3x AOC Q2577PWQ (2k IPS)
Case Inwin 303 White (Thermaltake Ring 120mm Purple accent)
Audio Device(s) Realtek ALC 1220 on Audio-Technica ATH-AG1
Power Supply Seasonic 1050W Snow
Mouse Roccat Tyon White
Keyboard Ducky Shine 6 Snow White
Software Windows 10 x64 Pro
#1
Likes: qubit
Joined
Sep 7, 2017
Messages
2,754 (6.75/day)
Likes
1,271
System Name Blackbox
Processor Intel i7-7820x
Motherboard SM C9X299-PG300
Cooling H100i
Memory 16GB 2666..tentatively
Video Card(s) Powercolor Vega 64
Storage 900p 280GB/Barracuda 10TB
Display(s) Viewsonic VX2457 + Samsung 4KTV/Freesync
Case Corsair C70
Power Supply AX860i
Software Win 10 Pro
#2
I've been hit by this or something similar, but a small (ecig) merchant. I need to force myself to use PayPal more often (but I've been doing it lately).
 

hat

Enthusiast
Joined
Nov 20, 2006
Messages
19,660 (4.52/day)
Likes
3,904
Location
Ohio
System Name Starlifter :: Dragonfly
Processor i5 2400 :: Athlon II x4 630
Motherboard MSI H67-G43-B3 :: GIgabyte GA-770T-USB3
Cooling Corsair H70 :: Thermaltake Big Typhoon
Memory 4x2GB DDR3 1333 :: 2x1GB DDR3 1333
Video Card(s) 2x PNY GTX1070 :: GT720
Storage Plextor M5s 128GB, WDC Black 500GB :: Mushkin Enhanced 60GB SSD, WD RE3 1TB
Display(s) Acer P216HL HDMI :: None
Case Antec SOHO 1030B :: Old White Full Tower
Audio Device(s) X-Fi Titanium Fatal1ty Pro - iLive IT153B Soundbar (optical) :: None
Power Supply Corsair CX600w :: Unknown
Software Windows 10 Pro - Plex Server on Dragonfly
Benchmark Scores >9000
#3
So, how did Newegg get injected with malicious code then?

@StrayKAT Yeah, I prefer to use PP whenever possible so my debit card info isn't just flying around everywhere... but that also probably makes PP a pretty big target for these guys, since they do have that information on a lot of people.
 
Joined
Dec 14, 2013
Messages
512 (0.29/day)
Likes
510
Location
Alabama
Processor I7 7700K
Motherboard Maximus IX Hero
Cooling Tt OCK Frio
Memory C.R.S.
Software Linux Mint 18
Benchmark Scores Never high enough
#4
One thing I don't like about sites such as Newegg is they want to save your card info for future orders and that's NOT GOOD. If you're too lazy to key in a few digits don't complain when said digits are stolen from these records.
However this was a skimming operation so any info gotten wasn't gained that way but it's still not a good practice to have your info "Out there".

I did purchase a few items last week at the egg so I'll have to get another card (Dammit :shadedshu:) - Nothing has happened yet but not taking a chance with this either.
What I hate most about this is the card is one that doesn't have one of those BS chips in it..... Well, so much for that now. :ohwell:
 
Joined
Sep 7, 2017
Messages
2,754 (6.75/day)
Likes
1,271
System Name Blackbox
Processor Intel i7-7820x
Motherboard SM C9X299-PG300
Cooling H100i
Memory 16GB 2666..tentatively
Video Card(s) Powercolor Vega 64
Storage 900p 280GB/Barracuda 10TB
Display(s) Viewsonic VX2457 + Samsung 4KTV/Freesync
Case Corsair C70
Power Supply AX860i
Software Win 10 Pro
#5
One thing I don't like about sites such as Newegg is they want to save your card info for future orders and that's NOT GOOD. If you're too lazy to key in a few digits don't complain when said digits are stolen from these records.
However this was a skimming operation so any info gotten wasn't gained that way but it's still not a good practice to have your info "Out there".

I did purchase a few items last week at the egg so I'll have to get another card (Dammit :shadedshu:) - Nothing has happened yet but not taking a chance with this either.
What I hate most about this is the card is one that doesn't have one of those BS chips in it..... Well, so much for that now. :ohwell:
I got screwed by a breach like that too.. in that famous Sony PSN debacle several years back. It made me leave Sony almost permantly (kind of how I ended up liking Microsoft over time.. by forcing myself to the Xbox). I finally got a PS4 though, but barely touch it.

Swiping is a helluva lot more insidious.. and starting to seem more common.
 

FordGT90Concept

"I go fast!1!11!1!"
Joined
Oct 13, 2008
Messages
23,027 (6.29/day)
Likes
12,046
Location
IA, USA
System Name BY-2015
Processor Intel Core i7-6700K (4 x 4.00 GHz) w/ HT and Turbo on
Motherboard MSI Z170A GAMING M7
Cooling Scythe Kotetsu
Memory 2 x Kingston HyperX DDR4-2133 8 GiB
Video Card(s) PowerColor PCS+ 390 8 GiB DVI + HDMI
Storage Crucial MX300 275 GB, Seagate 6 TB 7200 RPM
Display(s) Samsung SyncMaster T240 24" LCD (1920x1200 HDMI) + Samsung SyncMaster 906BW 19" LCD (1440x900 DVI)
Case Coolermaster HAF 932 w/ USB 3.0 5.25" bay
Audio Device(s) Realtek Onboard, Micca OriGen+
Power Supply Enermax Platimax 850w
Mouse SteelSeries Sensei RAW
Keyboard Tesoro Excalibur
Software Windows 10 Pro 64-bit
Benchmark Scores Faster than the tortoise; slower than the hare.
#6
So, how did Newegg get injected with malicious code then?
That's what I want to know too. Someone added JavaScript to a page on Newegg's domain.
 

Solaris17

Dainty Moderator
Staff member
Joined
Aug 16, 2005
Messages
19,838 (4.12/day)
Likes
6,917
Location
Florida
System Name Venslar
Processor I9 7980XE
Motherboard MSI x299 Tomahawk Arctic
Cooling EKWB L360 R2.0
Memory 32GB Corsair DDR4 3000mhz
Video Card(s) Gigabyte 1080TI
Storage 2x 2TB Micron SSDs | 1x ADATA 128SSD | 1x Drevo 256SSD | 1x 1TB 850 EVO | 1x 250GB 960 EVO
Display(s) 3x AOC Q2577PWQ (2k IPS)
Case Inwin 303 White (Thermaltake Ring 120mm Purple accent)
Audio Device(s) Realtek ALC 1220 on Audio-Technica ATH-AG1
Power Supply Seasonic 1050W Snow
Mouse Roccat Tyon White
Keyboard Ducky Shine 6 Snow White
Software Windows 10 x64 Pro
#7
That's what I want to know too. Someone added JavaScript to a page on Newegg's domain.
I dont know anymore then the article implies but since its an ongoing investigation by newegg we wont be told until its resolved and patched, thats industry standard in my field.
 

hat

Enthusiast
Joined
Nov 20, 2006
Messages
19,660 (4.52/day)
Likes
3,904
Location
Ohio
System Name Starlifter :: Dragonfly
Processor i5 2400 :: Athlon II x4 630
Motherboard MSI H67-G43-B3 :: GIgabyte GA-770T-USB3
Cooling Corsair H70 :: Thermaltake Big Typhoon
Memory 4x2GB DDR3 1333 :: 2x1GB DDR3 1333
Video Card(s) 2x PNY GTX1070 :: GT720
Storage Plextor M5s 128GB, WDC Black 500GB :: Mushkin Enhanced 60GB SSD, WD RE3 1TB
Display(s) Acer P216HL HDMI :: None
Case Antec SOHO 1030B :: Old White Full Tower
Audio Device(s) X-Fi Titanium Fatal1ty Pro - iLive IT153B Soundbar (optical) :: None
Power Supply Corsair CX600w :: Unknown
Software Windows 10 Pro - Plex Server on Dragonfly
Benchmark Scores >9000
#8
One thing I don't like about sites such as Newegg is they want to save your card info for future orders and that's NOT GOOD. If you're too lazy to key in a few digits don't complain when said digits are stolen from these records.
However this was a skimming operation so any info gotten wasn't gained that way but it's still not a good practice to have your info "Out there".

I did purchase a few items last week at the egg so I'll have to get another card (Dammit :shadedshu:) - Nothing has happened yet but not taking a chance with this either.
What I hate most about this is the card is one that doesn't have one of those BS chips in it..... Well, so much for that now. :ohwell:
What's wrong with those chips? I've had cards with and without, the only inconvenience for me was all the places that were or were not "chip ready" so sometimes I'd have to swipe card, sometimes use the chip, and I'd do the wrong one and have to do the other...
 
Joined
Jul 16, 2014
Messages
2,484 (1.60/day)
Likes
1,267
Location
SE Michigan
System Name Dumbass
Processor AMD-9370BE @4.6
Motherboard ASUS SABERTOOTH 990FX R2.0 +SB950
Cooling CM Nepton 280L
Memory G.Skill Sniper 16gb DDR3 2400
Video Card(s) GreenTeam 1080 Gaming X 8GB
Storage C:\SSD (240GB), D:\Seagate (2TB), E:\Western Digital (1TB)
Display(s) 1x Nixeus NX_EDG27, 2x Dell S2440L (16:9)
Case Phanteks Enthoo Primo w/8 140mm SP Fans
Audio Device(s) onboard (realtek?) SPKRS:Logitech Z623 200w 2.1
Power Supply Corsair HX1000i
Mouse Logitech G700s
Keyboard Logitech G910 Orion Spark
Software windows 10
Benchmark Scores https://i.imgur.com/aoz3vWY.jpg?2
#9
not surprised the page was hacked, could mean an "inside man".
 
Joined
Sep 7, 2017
Messages
2,754 (6.75/day)
Likes
1,271
System Name Blackbox
Processor Intel i7-7820x
Motherboard SM C9X299-PG300
Cooling H100i
Memory 16GB 2666..tentatively
Video Card(s) Powercolor Vega 64
Storage 900p 280GB/Barracuda 10TB
Display(s) Viewsonic VX2457 + Samsung 4KTV/Freesync
Case Corsair C70
Power Supply AX860i
Software Win 10 Pro
#10
not surprised the page was hacked, being owned by china could mean an "inside man".
I guess it's possible, but from what I can tell, a lot of these people going after transactions and credit cards turn out to be average type of urban criminals.. many of them script kiddies (probably not in this case), who, 20-30 years ago, would have just been robbing purses. China goes after the big bucks... and can just screw over the world through trade and cheap labor.
 

Solaris17

Dainty Moderator
Staff member
Joined
Aug 16, 2005
Messages
19,838 (4.12/day)
Likes
6,917
Location
Florida
System Name Venslar
Processor I9 7980XE
Motherboard MSI x299 Tomahawk Arctic
Cooling EKWB L360 R2.0
Memory 32GB Corsair DDR4 3000mhz
Video Card(s) Gigabyte 1080TI
Storage 2x 2TB Micron SSDs | 1x ADATA 128SSD | 1x Drevo 256SSD | 1x 1TB 850 EVO | 1x 250GB 960 EVO
Display(s) 3x AOC Q2577PWQ (2k IPS)
Case Inwin 303 White (Thermaltake Ring 120mm Purple accent)
Audio Device(s) Realtek ALC 1220 on Audio-Technica ATH-AG1
Power Supply Seasonic 1050W Snow
Mouse Roccat Tyon White
Keyboard Ducky Shine 6 Snow White
Software Windows 10 x64 Pro
Status
Not open for further replies.
Top