{"id":1899,"date":"2019-08-06T15:52:02","date_gmt":"2019-08-06T10:52:02","guid":{"rendered":"http:\/\/blog.advhtech.com\/?p=1899"},"modified":"2019-08-06T15:52:02","modified_gmt":"2019-08-06T10:52:02","slug":"pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019","status":"publish","type":"post","link":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/","title":{"rendered":"PCI SS Council Identifies &#8216;Magecart&#8217; As The Next Big Threat For Hotel Businesses"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>August 1, 2019<\/strong> &#8211; The PCI security standards council (PCI SSC) and the Retail &amp; Hospitality ISAC have released an immediate press release highlighting the emergence of a new financial threat for hospitality businesses.\u00a0<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Online Skimming<\/strong>, is the new malicious cybervulnerability on the block threatening eCommerce websites with what are being called \u201csniffers\u201d (or JavaScript sniffers). These as identified by the PCI-SSC and the ISAC have proved difficult to detect.&nbsp;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Online skimming sniffers tend to infect websites with <strong>malicious code that then begins skimming payment card information during transactions<\/strong>, with both merchants and consumers unaware of what is happening.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Security researchers have termed these hacker groups, Magecart. Online skimming has been actively conducted by cybercriminals since 2015 but used to be detectable by most popular security suites. These evolved versions have now evolved into a completely new malicious cyberweapon even used against international organizations.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Do Online Skimming Attacks Work&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cybercriminals use various techniques to infiltrate eCommerce websites that include:<br><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Exploiting vulnerable plugins<\/strong><\/li><li><strong>Brute force login attempts &amp; credential stuffing\u00a0<\/strong><\/li><li><strong>Phishing<\/strong><\/li><li><strong>Social engineering techniques\u00a0\u00a0<\/strong><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Irrespective of the technique, their primary aims ins infiltration and injecting the malicious code. Generally, cybercriminals attack eCommerce websites directly, or, inject code into a 3rd party software library that merchants rely on.&nbsp;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Some examples of 3rd party apps that skimming attackers infiltrate include live chat plugins, customer rating apps, and advertising scripts (hello bars, widgets, etc.). Since one 3rd party app can be used over multiple websites, attackers can gain access to multiple websites by compromising a single domain.&nbsp;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As soon as a buyer enters their payment information during checkout the malicious code is triggered. Once the JavaScript executes it silently collects a vast array of data including billing addresses, names, emails, phone numbers, credit card details, usernames, and passwords.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to Detect \u201cMageCart\u201d Online Skimming Attacks<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Considering the damage this threat can cause to a hospitality business and its guests, the PCI SSC offers a clear roadmap to ensure detection of these attacks:<br><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Perform code reviews &amp; identify potential coding vulnerabilities&nbsp;<\/li><li>Implement security vulnerability assessments and test web plug-ins &amp; apps&nbsp;<\/li><li>Conduct comprehensive audits of logging, reviewing logs, and security events for the entire system to identify malicious code and activities<\/li><li>Integrate file-integrity monitoring and change detection software suites&nbsp;<\/li><li>Perform internal and external network vulnerability tests &amp; scans&nbsp;<\/li><li>Identify security weaknesses with \u201cperiod penetration testing\u201d<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">How to Prevent \u201cMageCart\u201d Online Skimming Attacks<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Since the detection of \u201cmagecart\u201d attacks is not very easy, it&#8217;s ideal to keep eCommerce websites and hospitality portals updates with all the latest security patches. Here is a list of <a href=\"https:\/\/www.pcisecuritystandards.org\/pdfs\/PCISSC_Magecart_Bulletin_RHISAC_FINAL.pdf\">PCI DSS recommended best practices<\/a> to stop online skimming attacks from happening altogether:<br><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Disable unnecessary ports\/services\/functions and configure components securely in accordance with industry-accepted system hardening standards&nbsp;<\/strong><\/li><li><strong>Implement malware protection and keep up to date&nbsp;<\/strong><\/li><li><strong>Apply security patches for all software&nbsp;<\/strong><\/li><li><strong>Follow secure coding practices and perform code reviews&nbsp;<\/strong><\/li><li><strong>Restrict access to only what is absolutely needed and deny all other access by default<\/strong><\/li><li><strong>Use strong authentication for all access to system components&nbsp;<\/strong><\/li><li><strong>Implement intrusion-detection and\/or intrusion-prevention to detect and prevent intrusions&nbsp;<\/strong><\/li><li><strong>Conduct proper due diligence prior to engagement of third-party service providers and monitor service providers\u2019 PCI DSS compliance status&nbsp;<\/strong><\/li><li><strong>Additional controls for hosting service providers to protect their customers\u2019 hosted environments and data&nbsp;<\/strong><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>The PCI security standards council (PCI SSC) and the Retail &#038; Hospitality ISAC have released an immediate press release highlighting the emergence of a new financial threat for hospitality businesses.<\/p>\n","protected":false},"author":1,"featured_media":1903,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"image","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[330,335,336,337,342],"tags":[407,420,451,452,453],"class_list":["post-1899","post","type-post","status-publish","format-image","has-post-thumbnail","hentry","category-technology","category-it-security","category-it-technology","category-news-and-pr","category-security","tag-hotel-data-security","tag-hotel-technology-security","tag-pci-compliance","tag-pci-security","tag-pci-sss","post_format-post-format-image"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>PCI SS Council Identifies &#039;Magecart&#039; As The Next Big Threat For Hotel Businesses - Advanced Hospitality Technologies Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PCI SS Council Identifies &#039;Magecart&#039; As The Next Big Threat For Hotel Businesses - Advanced Hospitality Technologies Blog\" \/>\n<meta property=\"og:description\" content=\"The PCI security standards council (PCI SSC) and the Retail &amp; Hospitality ISAC have released an immediate press release highlighting the emergence of a new financial threat for hospitality businesses.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/\" \/>\n<meta property=\"og:site_name\" content=\"Advanced Hospitality Technologies Blog\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-06T10:52:02+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/advhtech.com\/blog\/#\/schema\/person\/43f27cd8b9702378bfc0657473b7db9b\"},\"headline\":\"PCI SS Council Identifies &#8216;Magecart&#8217; As The Next Big Threat For Hotel Businesses\",\"datePublished\":\"2019-08-06T10:52:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/\"},\"wordCount\":582,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/advhtech.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#primaryimage\"},\"thumbnailUrl\":\"\",\"keywords\":[\"Hotel Data Security\",\"Hotel Technology Security\",\"PCI Compliance\",\"PCI Security\",\"PCI SSS\"],\"articleSection\":[\"Hospitality Technology\",\"IT Security\",\"IT Technology\",\"News and PR\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/\",\"url\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/\",\"name\":\"PCI SS Council Identifies 'Magecart' As The Next Big Threat For Hotel Businesses - Advanced Hospitality Technologies Blog\",\"isPartOf\":{\"@id\":\"https:\/\/advhtech.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2019-08-06T10:52:02+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/advhtech.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PCI SS Council Identifies &#8216;Magecart&#8217; As The Next Big Threat For Hotel Businesses\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/advhtech.com\/blog\/#website\",\"url\":\"https:\/\/advhtech.com\/blog\/\",\"name\":\"Advanced Hospitality Technologies Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/advhtech.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/advhtech.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/advhtech.com\/blog\/#organization\",\"name\":\"Advanced Hospitality Technologies Blog\",\"url\":\"https:\/\/advhtech.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/advhtech.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/advhtech.com\/blog\/wp-content\/uploads\/2025\/09\/logo.svg\",\"contentUrl\":\"https:\/\/advhtech.com\/blog\/wp-content\/uploads\/2025\/09\/logo.svg\",\"width\":500,\"height\":83,\"caption\":\"Advanced Hospitality Technologies Blog\"},\"image\":{\"@id\":\"https:\/\/advhtech.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/advhtech.com\/blog\/#\/schema\/person\/43f27cd8b9702378bfc0657473b7db9b\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/advhtech.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8fe99e285c1a3348dcc558cc76ecefe5231831014beee623561e51086b4e0c40?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8fe99e285c1a3348dcc558cc76ecefe5231831014beee623561e51086b4e0c40?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/115a311.netsolhost.com\/advhtech\/blog\"],\"url\":\"https:\/\/advhtech.com\/blog\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PCI SS Council Identifies 'Magecart' As The Next Big Threat For Hotel Businesses - Advanced Hospitality Technologies Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/","og_locale":"en_US","og_type":"article","og_title":"PCI SS Council Identifies 'Magecart' As The Next Big Threat For Hotel Businesses - Advanced Hospitality Technologies Blog","og_description":"The PCI security standards council (PCI SSC) and the Retail & Hospitality ISAC have released an immediate press release highlighting the emergence of a new financial threat for hospitality businesses.","og_url":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/","og_site_name":"Advanced Hospitality Technologies Blog","article_published_time":"2019-08-06T10:52:02+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#article","isPartOf":{"@id":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/"},"author":{"name":"admin","@id":"https:\/\/advhtech.com\/blog\/#\/schema\/person\/43f27cd8b9702378bfc0657473b7db9b"},"headline":"PCI SS Council Identifies &#8216;Magecart&#8217; As The Next Big Threat For Hotel Businesses","datePublished":"2019-08-06T10:52:02+00:00","mainEntityOfPage":{"@id":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/"},"wordCount":582,"commentCount":0,"publisher":{"@id":"https:\/\/advhtech.com\/blog\/#organization"},"image":{"@id":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#primaryimage"},"thumbnailUrl":"","keywords":["Hotel Data Security","Hotel Technology Security","PCI Compliance","PCI Security","PCI SSS"],"articleSection":["Hospitality Technology","IT Security","IT Technology","News and PR","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/","url":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/","name":"PCI SS Council Identifies 'Magecart' As The Next Big Threat For Hotel Businesses - Advanced Hospitality Technologies Blog","isPartOf":{"@id":"https:\/\/advhtech.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#primaryimage"},"image":{"@id":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#primaryimage"},"thumbnailUrl":"","datePublished":"2019-08-06T10:52:02+00:00","breadcrumb":{"@id":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#primaryimage","url":"","contentUrl":""},{"@type":"BreadcrumbList","@id":"https:\/\/advhtech.com\/blog\/pci-council-identifies-magecart-big-threat-for-hotel-technology-in-2019\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/advhtech.com\/blog\/"},{"@type":"ListItem","position":2,"name":"PCI SS Council Identifies &#8216;Magecart&#8217; As The Next Big Threat For Hotel Businesses"}]},{"@type":"WebSite","@id":"https:\/\/advhtech.com\/blog\/#website","url":"https:\/\/advhtech.com\/blog\/","name":"Advanced Hospitality Technologies Blog","description":"","publisher":{"@id":"https:\/\/advhtech.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/advhtech.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/advhtech.com\/blog\/#organization","name":"Advanced Hospitality Technologies Blog","url":"https:\/\/advhtech.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/advhtech.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/advhtech.com\/blog\/wp-content\/uploads\/2025\/09\/logo.svg","contentUrl":"https:\/\/advhtech.com\/blog\/wp-content\/uploads\/2025\/09\/logo.svg","width":500,"height":83,"caption":"Advanced Hospitality Technologies Blog"},"image":{"@id":"https:\/\/advhtech.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/advhtech.com\/blog\/#\/schema\/person\/43f27cd8b9702378bfc0657473b7db9b","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/advhtech.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8fe99e285c1a3348dcc558cc76ecefe5231831014beee623561e51086b4e0c40?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8fe99e285c1a3348dcc558cc76ecefe5231831014beee623561e51086b4e0c40?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/115a311.netsolhost.com\/advhtech\/blog"],"url":"https:\/\/advhtech.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/advhtech.com\/blog\/wp-json\/wp\/v2\/posts\/1899","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/advhtech.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/advhtech.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/advhtech.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/advhtech.com\/blog\/wp-json\/wp\/v2\/comments?post=1899"}],"version-history":[{"count":0,"href":"https:\/\/advhtech.com\/blog\/wp-json\/wp\/v2\/posts\/1899\/revisions"}],"wp:attachment":[{"href":"https:\/\/advhtech.com\/blog\/wp-json\/wp\/v2\/media?parent=1899"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/advhtech.com\/blog\/wp-json\/wp\/v2\/categories?post=1899"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/advhtech.com\/blog\/wp-json\/wp\/v2\/tags?post=1899"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}