What is FormJacking

 

What is a formjacking attack?

 

Source: Internet 

Formjacking attacks are designed and executed by cybercriminals to steal financial and banking details from payment forms that can be captured directly on the checkout pages from eCommerce websites. Such type of attack has been affecting organizations that mostly accept online payment from consumers.

“Let’s say that you fill up the financial information while ordering the product online in the online shopping websites – but before even hitting the submit button, cybercriminals steal your information – that’s formjacking”

Formjacking is a type of cyber-attack in which hackers insert malicious JavaScript code into the target website, most often to a payment page form.

Once the malicious code is in operation, when a customer enters their payment card information and hits submit, the compromised code sends the payment card number and other sensitive information like the consumer’s name, and phone number to the hacker.

Hackers send this stolen information to a server for reuse or even sell the personal details on the dark web. While all this happens, the victim is blissfully unaware of their payment details being compromised.

According to the authenticated Symantec Internet Security Threat Report, 2019, formjackers hacked 4,818 unique websites each month in 2018. Symantec blocked more than 3.7 million formjacking attack attempts in that year alone.