Sansec

Reported Context (3)

A threat actor has infected 953 online stores, most of them running Magento, with loader code as part of a long-running campaign, cybersecurity firm Sansec reports. Sansec Reports 953 Online Stores Hit by Long-Running Loader Campaign
Sansec and Disrex confirmed active compromises affecting Magento Open Source versions 2.4.6-p15 through 2.4.9, and advised merchants to disable GraphQL temporarily while waiting for Adobe’s fix. Unpatched StyleSmuggler Flaw Exploited to Install Backdoors on Magento Stores
Attempts to exploit CVE-2026-71362 in Adobe Commerce and Magento are being blocked by Sansec’s Shield WAF, even though Adobe says it is not aware of active exploitation in the wild. Sansec Reports Attempts to Exploit Critical Adobe Commerce Flaw

CVE (9)

MITRE ATT&CK (5)

Vendors (2)

Products (6)

Tools (2)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.