SCIENTIFIC METHOD+PREDICTIVE
SALES & MARKETING ANALYTICS
Slide 1
Slide 2
Slide 3
Apr
24
2015
Magento Ecommerce Websites Require Immediate Update

Magneto Ecommerce Websites Have Major Vulnerability

Check Point, the cyber security company who discovered and posted a video on its blog. Their engineers setup an ecommerce demonstration that showed how the Magneto flaw could be used to reduce the price of a US$100,000 watch so that shoppers could purchase for much less.magento-ecommerce-logo

David Cid, the CTO of Sucuri wrote the hackers will first create a fake administrator account in the Magento ecommerce database your website is on.  Later, they will come back and execute the attack, crippling your business.

Recommended Next Steps

A patch has been release and you need to immediate update to the lastest version of Magento.Netanel Rubin said “the vulnerability in Magento is composed of several flaws which allow an unauthenticated hacker to run PHP code on a web server. The flaws are within Magento’s core code and affects default installations of Magento’s Community 1.9.1.0 and Enterprise 1.14.1.0 editions.”

Securi’s researchers stated: “always from these two IP addresses from Russia: 62.76.177.179 and 185.22.232.218. If you look for them in your logs, you can see if you have been attacked by the same group.”

This is also the perfect time to check with your SSL companies and ensure that your ecommerce business is protected from hackers.

Check your Google Webmaster Tools account and ensure that your domain is properly setup.  Often times you will receive alerts when Google has detected your website has been hacked.

About the Author
Alex Fender is a Google Certified Analytics Consultant and is an expert in internet marketing. If you have questions or would like to contact him, he can be reached at (972) 867-3100.