Newegg checkout process compromised

Solaris17 · Sep 19, 2018

You can read about it here

https://www.riskiq.com/blog/labs/magecart-newegg/

StrayKAT · Sep 19, 2018

I've been hit by this or something similar, but a small (ecig) merchant. I need to force myself to use PayPal more often (but I've been doing it lately).

hat · Sep 19, 2018

So, how did Newegg get injected with malicious code then?

@StrayKAT Yeah, I prefer to use PP whenever possible so my debit card info isn't just flying around everywhere... but that also probably makes PP a pretty big target for these guys, since they do have that information on a lot of people.

Bones · Sep 19, 2018

One thing I don't like about sites such as Newegg is they want to save your card info for future orders and that's NOT GOOD. If you're too lazy to key in a few digits don't complain when said digits are stolen from these records.
However this was a skimming operation so any info gotten wasn't gained that way but it's still not a good practice to have your info "Out there".

I did purchase a few items last week at the egg so I'll have to get another card (Dammit :shadedshu:

) - Nothing has happened yet but not taking a chance with this either.
What I hate most about this is the card is one that doesn't have one of those BS chips in it..... Well, so much for that now. :ohwell:

StrayKAT · Sep 19, 2018

Bones said:
One thing I don't like about sites such as Newegg is they want to save your card info for future orders and that's NOT GOOD. If you're too lazy to key in a few digits don't complain when said digits are stolen from these records.
However this was a skimming operation so any info gotten wasn't gained that way but it's still not a good practice to have your info "Out there".

I did purchase a few items last week at the egg so I'll have to get another card (Dammit ) - Nothing has happened yet but not taking a chance with this either.
What I hate most about this is the card is one that doesn't have one of those BS chips in it..... Well, so much for that now.

I got screwed by a breach like that too.. in that famous Sony PSN debacle several years back. It made me leave Sony almost permantly (kind of how I ended up liking Microsoft over time.. by forcing myself to the Xbox). I finally got a PS4 though, but barely touch it.

Swiping is a helluva lot more insidious.. and starting to seem more common.

FordGT90Concept · Sep 19, 2018

hat said:
So, how did Newegg get injected with malicious code then?

That's what I want to know too. Someone added JavaScript to a page on Newegg's domain.

Solaris17 · Sep 19, 2018

FordGT90Concept said:
That's what I want to know too. Someone added JavaScript to a page on Newegg's domain.

I dont know anymore then the article implies but since its an ongoing investigation by newegg we wont be told until its resolved and patched, thats industry standard in my field.

hat · Sep 19, 2018

Bones said:
One thing I don't like about sites such as Newegg is they want to save your card info for future orders and that's NOT GOOD. If you're too lazy to key in a few digits don't complain when said digits are stolen from these records.
However this was a skimming operation so any info gotten wasn't gained that way but it's still not a good practice to have your info "Out there".

I did purchase a few items last week at the egg so I'll have to get another card (Dammit ) - Nothing has happened yet but not taking a chance with this either.
What I hate most about this is the card is one that doesn't have one of those BS chips in it..... Well, so much for that now.

What's wrong with those chips? I've had cards with and without, the only inconvenience for me was all the places that were or were not "chip ready" so sometimes I'd have to swipe card, sometimes use the chip, and I'd do the wrong one and have to do the other...

DeathtoGnomes · Sep 19, 2018

not surprised the page was hacked, could mean an "inside man".

StrayKAT · Sep 19, 2018

DeathtoGnomes said:
not surprised the page was hacked, being owned by china could mean an "inside man".

I guess it's possible, but from what I can tell, a lot of these people going after transactions and credit cards turn out to be average type of urban criminals.. many of them script kiddies (probably not in this case), who, 20-30 years ago, would have just been robbing purses. China goes after the big bucks... and can just screw over the world through trade and cheap labor.

Solaris17 · Sep 20, 2018

We have an official discussion now!

https://www.techpowerup.com/forums/...potential-data-theft-for-over-a-month.247759/

System Name	Rocinante
Processor	I9 14900KS
Motherboard	EVGA z690 Dark KINGPIN (modded BIOS)
Cooling	EK-AIO Elite 360 D-RGB
Memory	64GB Gskill Trident Z5 DDR5 6000 @6400
Video Card(s)	MSI SUPRIM Liquid X 4090
Storage	1x 500GB 980 Pro \| 1x 1TB 980 Pro \| 1x 8TB Corsair MP400
Display(s)	Odyssey OLED G9 G95SC
Case	Lian Li o11 Evo Dynamic White
Audio Device(s)	Moondrop S8's on Schiit Hel 2e
Power Supply	Bequiet! Power Pro 12 1500w
Mouse	Lamzu Atlantis mini (White)
Keyboard	Monsgeek M3 Lavender, Akko Crystal Blues
VR HMD	Quest 3
Software	Windows 11
Benchmark Scores	I dont have time for that.

System Name	Grunt
Processor	Ryzen 5800x
Motherboard	Gigabyte x570 Gaming X
Cooling	Noctua NH-U12A
Memory	Corsair LPX 3600 4x8GB
Video Card(s)	Gigabyte 6800 XT (reference)
Storage	Samsung 980 Pro 2TB
Display(s)	Samsung CFG70, Samsung NU8000 TV
Case	Corsair C70
Power Supply	Corsair HX750
Software	Win 10 Pro

System Name	Starlifter :: Dragonfly
Processor	i7 2600k 4.4GHz :: i5 10400
Motherboard	ASUS P8P67 Pro :: ASUS Prime H570-Plus
Cooling	Cryorig M9 :: Stock
Memory	4x4GB DDR3 2133 :: 2x8GB DDR4 2400
Video Card(s)	PNY GTX1070 :: Integrated UHD 630
Storage	Crucial MX500 1TB, 2x1TB Seagate RAID 0 :: Mushkin Enhanced 60GB SSD, 3x4TB Seagate HDD RAID5
Display(s)	Onn 165hz 1080p :: Acer 1080p
Case	Antec SOHO 1030B :: Old White Full Tower
Audio Device(s)	Creative X-Fi Titanium Fatal1ty Pro - Bose Companion 2 Series III :: None
Power Supply	FSP Hydro GE 550w :: EVGA Supernova 550
Software	Windows 10 Pro - Plex Server on Dragonfly
Benchmark Scores	>9000

Processor	Ryzen 2700X
Motherboard	X470 Tachi Ultimate
Cooling	Scythe Big Shuriken 3
Memory	C.R.S.
Video Card(s)	Radeon VII
Software	Win 7
Benchmark Scores	Never high enough

System Name	Grunt
Processor	Ryzen 5800x
Motherboard	Gigabyte x570 Gaming X
Cooling	Noctua NH-U12A
Memory	Corsair LPX 3600 4x8GB
Video Card(s)	Gigabyte 6800 XT (reference)
Storage	Samsung 980 Pro 2TB
Display(s)	Samsung CFG70, Samsung NU8000 TV
Case	Corsair C70
Power Supply	Corsair HX750
Software	Win 10 Pro

Newegg checkout process compromised

Solaris17

Super Dainty Moderator

StrayKAT

hat

Enthusiast

Bones

StrayKAT

FordGT90Concept

"I go fast!1!11!1!"

Solaris17

Super Dainty Moderator

hat

Enthusiast

DeathtoGnomes

StrayKAT

Solaris17

Super Dainty Moderator

System Name	BY-2021
Processor	AMD Ryzen 7 5800X (65w eco profile)
Motherboard	MSI B550 Gaming Plus
Cooling	Scythe Mugen (rev 5)
Memory	2 x Kingston HyperX DDR4-3200 32 GiB
Video Card(s)	AMD Radeon RX 7900 XT
Storage	Samsung 980 Pro, Seagate Exos X20 TB 7200 RPM
Display(s)	Nixeus NX-EDG274K (3840x2160@144 DP) + Samsung SyncMaster 906BW (1440x900@60 HDMI-DVI)
Case	Coolermaster HAF 932 w/ USB 3.0 5.25" bay + USB 3.2 (A+C) 3.5" bay
Audio Device(s)	Realtek ALC1150, Micca OriGen+
Power Supply	Enermax Platimax 850w
Mouse	Nixeus REVEL-X
Keyboard	Tesoro Excalibur
Software	Windows 10 Home 64-bit
Benchmark Scores	Faster than the tortoise; slower than the hare.

System Name	Dumbass
Processor	AMD Ryzen 7800X3D
Motherboard	ASUS TUF gaming B650
Cooling	Artic Liquid Freezer 2 - 420mm
Memory	G.Skill Sniper 32gb DDR5 6000
Video Card(s)	GreenTeam 4070 ti super 16gb
Storage	Samsung EVO 500gb & 1Tb, 2tb HDD, 500gb WD Black
Display(s)	1x Nixeus NX_EDG27, 2x Dell S2440L (16:9)
Case	Phanteks Enthoo Primo w/8 140mm SP Fans
Audio Device(s)	onboard (realtek?) - SPKRS:Logitech Z623 200w 2.1
Power Supply	Corsair HX1000i
Mouse	Steeseries Esports Wireless
Keyboard	Corsair K100
Software	windows 10 H
Benchmark Scores	https://i.imgur.com/aoz3vWY.jpg?2