Global CyberSecurity

PrestaShop SuperAdmin Injector and Login Stealer

0

Published on 11/18/2020 – Last Updated on 11/18/2020 by OTC

According to W3Tech’s data, PrestaShop is among the most popular CMS choices for existing ecommerce websites, so it should come as no surprise that malware has been created to specifically target these environments.

We recently came across an infected PrestaShop website with malware which was automatically injecting a super admin PrestaShop user whenever the website owner logged into the backend.

The malware was found injected into the following existing PrestaShop core files:

./controllers/admin/AdminLoginController.php
./classes/Employee.php

The injected PHP code works by checking the $email variable contents — which, by default, stores the email address used when trying to log into PrestaShop.

Continue reading PrestaShop SuperAdmin Injector and Login Stealer at Sucuri Blog.

Business as Unusual: How to Communicate Your New and Updated Services with Google My Business

Previous article

Egyptian naval group arrives in Novorossiysk for Friendship Bridge-2020

Next article

You may also like

Comments

Comments are closed.