Since September 2019, a fire that has raged for more than 100 days has raged on Australian soil, with more than 20,000 koalas killed, 10 million hectares of forested scorched earth, more than 2,000 homes destroyed, thousands of residents forced to relocate, and the death toll has reached nearly 30… In the face of natural disasters, people from all over the world have donated to Australia through an online fundraising platform in an effort to get the fire out of the way.
However, it is in this case that security experts on the Malwarebytes anti-hacking platform have discovered that a fundraising platform is being attacked by hackers.
The site was reportedly attacked by a malicious script that hackers could use to steal credit cards and payment information from donors, most likely by magecarts that had attacked more than 80 companies, including Ticketmaster, Forbes and British Airways. In September 2018, British Airways said more than 380,000 customers had their personal and payment information stolen.
Malicious scripts are still active on the site, and Malwarebytes has warned the operator, but the latter has yet to respond. In addition, Malwarebytes said, the script is also active on three other fundraising platforms, and it is not possible to estimate how much damage will be.