Jump to content
Search In
  • More options...
Find results that contain...
Find results in...

[UPDATED] Newegg Breached by Magecart Card Skimmer

Source:

RiskIq

TechCrunch

 

TL;DR:

If you purchased an item between August 14 and September 18 on Newegg, you may need to call your bank

 

Media (courtsey @Pretzel4000):

neweggmalware.JPG

 

 

Quotes/Excerpts:

Quote

Newegg is clearing up its website after a month-long data breach. Hackers injected 15 lines of card skimming code on the online retailer’s payments page... between August 14 and September 18. The code siphoned off credit card data from unsuspecting customers. The code also worked for both desktop and mobile customers — though it’s unclear if mobile customers are affected. The online electronics retailer removed the code on Tuesday after it was contacted by incident response firm Volexity. When reached, a Newegg spokesperson did not immediately comment. “The breach of Newegg shows the true extent of Magecart operators’ reach,” The hackers “integrated with the victim’s payment system and blended with the infrastructure and stayed there as long as possible.” Anyone who entered their credit card data during the period should immediately contact their banks.

 

My Thoughts:

With the scope of Magecart, we may start seeing additional websites reporting the same thing shortly. If you have purchased from newegg recently, be sure to contact your bank!

Edited by rcmaehl
Add image. Courtsey Pretzel4000

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

LinusWare Dev | NotCPUCores Dev

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX480 8GB OC, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to post
Share on other sites

I just bought a couple things yesterday night but I paid through PayPal.

Guides & Tutorials:

How To: Access Remote Systems at Home/Work Securely from Anywhere with Pritunl

How to Format Storage Devices in Windows 10

A How-To: Drive Sharing in Windows 10

VFIO GPU Pass-though w/ Looking Glass KVM on Ubuntu 19.04

A How-To Guide: Building a Rudimentary Disk Enclosure

Three Methods to Resetting a Windows Login Password

A Beginners Guide to Debian CLI Based File Servers

A Beginners Guide to PROXMOX

 

Guide/Tutorial in Progress:

How To: Remotely Access Your Server/NAS

 

In the Queue:

How to Use Memtest86 to Diagnose RAM Errors

 

Don't see what you need? Check the Full List or *PM me, if I haven't made it I'll add it to the list.

*NOTE: I'll only add it to the list if the request is something I know I can do.

Link to post
Share on other sites

!@#$

 

Paypal has locked my account and any transactions. Related?

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

LinusWare Dev | NotCPUCores Dev

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX480 8GB OC, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to post
Share on other sites

Solution: Go to a CVS or other store and buy newegg and amazon gift cards with cash.

Hello! Feel free to PM me anything. Here's my stuff below!

PC (Main)

Spoiler

CPU: i5-8400 CPU Cooler: Cryorig M9 Plus   Motherboard: Gigabyte B360M DS3H | RAM: Crucial Ballistix Sport 2x8 DDR4-2400 SSD: Inland 480GB SSD | Video Card: RX 570 4GB Strix OC | Case: Fractal Design Meshify C White TGPSU: EVGA SuperNOVA G3 750 Monitor: Sceptre 24" 1080p 75hz Webcam: Logitech C920 Keyboard: Modded FC660M | Mouse: G305

 

NAS:

Spoiler

Synology DS418J w/ 4x WD Red Pro 6TB RAID 10

Seagate 5TB external SMR 2.5" HDD

MS Office 365 - 1TB Onedrive

 

Phone/Tablet:

Spoiler

iPhone XR 64GB iPad Mini 4 128GB

 

Laptops:

Spoiler

Dell XPS 15 9570 i7-8750H + 1050 Ti MacBook Air 13" mid-2012

 

Audio:

Spoiler

 Audio-Technica AD700X + Modmic 4 KZ ZS10 Pro | Audio-Technica LP120USB Audioengine A2+

 

Link to post
Share on other sites
3 minutes ago, rcmaehl said:

!@#$

 

It seemingly affects paypal too. Paypal has locked my account and any transactions

 

FUCK, I just bought something on Newegg 2 days ago.

 

Does it affect paypal transactions? I haven't heard anything from Paypal, and as far as I know, Paypal doesn't share payment info with the seller website? ?

 

Link to post
Share on other sites
1 minute ago, maartendc said:

 

FUCK, I just bought something on Newegg 2 days ago.

 

Does it affect paypal transactions? I haven't heard anything from Paypal, and as far as I know, Paypal doesn't share payment info with the seller website? ?

 

No pending transactions but I logged in yesterday no problem to purchase from newegg. Today, all of a sudden it's asking for password changes and PIN setup.

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

LinusWare Dev | NotCPUCores Dev

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX480 8GB OC, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to post
Share on other sites

Checks Newegg order history

Oh good, I bought the x399 and Ripjaw a month before that happened.

Bloodshed and the Fenris-Wolf:

| CPU:  Ryzen 9 3900x | CPU Cooler:  EKWB EK-AIO 360 D-RGB | Paste:  Kryonaut | Motherboard:  ASUS ROG x570 Crosshair VIII Hero (Wi-Fi) | RAM:  G.Skill Ripjaws V Series 64 GB (4 x 16 GB) DDR4-3200 | Boot Drive:  Samsung 970 Evo Plus 1 TB M.2-2280 NVME | Storage Drives:  Crucial MX500 500 GB M.2-2280+Western Digital WD Blue 2 TB 2.5"+Toshiba N300 8 TB 3.5" 7200RPM+Toshiba X300 4 TB 3.5" | GPU:  ZOTAC GAMING GeForce RTX 2080 Ti AMP Extreme Core | Case:  Lian Li O11 Dynamic XL ROG Certified (Black) with Corsair SP140 49.49 CFM 140 mm Fans 2-Pack+4x Cooler Master SickleFlow 120 V2 Reds added | PSU:  EVGA SuperNOVA G2 750 W 80+ Gold Certified Fully Modular ATX Power Supply w/CableMod E-Series Cable Kit (Black/Red) | Case Fans:  2 Corsair SP140 49.49 CFM 140 mm Fans | Displays:  BenQ PD2700U 27.0" 3840x2160 60 Hz+Asus TUF Gaming VG27AQ 27.0" 2560x1440 165 Hz+MSI Optix MAG322CR 31.5" 1920x1080 180 Hz | Mouse:  Corsair M65 RGB ELITE | Keyboard:  Ducky Shine 7 Blackout - MK Exclusive First Release - RGB LED Double Shot PBT Mechanical Keyboard with Silent Red Switches | Mousepad:  Gaya Entertainment Oversized Gaming Mousepad Doom | Audio:  AKG K712 PRO Headphones+Audio-Technica ATR2500-USB Cardioid Condenser USB Microphone+Kingston HyperX Cloud II 7.1 Channel Headset+iBasso IT01 Dynamic Driver Audiophile In-Ear Monitors/Earbuds (Black)+Pair of Mackie MR624s(came with stands+isolation pads) | OS:  Windows 10 Pro |



Bifröst(ROG Zephyrus M GU502):

| CPU:  i7-9750h | RAM:  32GB Dual Channel 2666mhz CL 19(Stock+Samsung 16GB DDR4 PC4-21300, 2666MHZ, 260 PIN SODIMM, 1.2V, CL 19 ) | Storage:  1TB SSD with Optane | GPU:  Nvidia RTX 2060 | Display:  144hz 3ms | Mouse:  Corsair M65 Pro |

Link to post
Share on other sites
4 minutes ago, valdyrgramr said:

Checks Newegg order history

Oh good, I bought the x399 and Ripjaw a month before that happened.

Nice, I was debating whether to order a power supply of amazon or Newegg two days ago, chose amazon so I’m safe too lol.

Link to post
Share on other sites

Just checked my PayPal but it hasn't prompted me for password or PIN changes. I may have placed my order just after they fixed it. I put it in at 2:29PM EST

Guides & Tutorials:

How To: Access Remote Systems at Home/Work Securely from Anywhere with Pritunl

How to Format Storage Devices in Windows 10

A How-To: Drive Sharing in Windows 10

VFIO GPU Pass-though w/ Looking Glass KVM on Ubuntu 19.04

A How-To Guide: Building a Rudimentary Disk Enclosure

Three Methods to Resetting a Windows Login Password

A Beginners Guide to Debian CLI Based File Servers

A Beginners Guide to PROXMOX

 

Guide/Tutorial in Progress:

How To: Remotely Access Your Server/NAS

 

In the Queue:

How to Use Memtest86 to Diagnose RAM Errors

 

Don't see what you need? Check the Full List or *PM me, if I haven't made it I'll add it to the list.

*NOTE: I'll only add it to the list if the request is something I know I can do.

Link to post
Share on other sites

OP said his paypal got locked. Is this affecting paypal? 

 

 

Ryzen 7 2700x | MSI B450 Tomahawk | GTX 780 Windforce | 16GB 3200
Dell 3007WFP | 2xDell 2001FP | Logitech G710 | Logitech G710 | Team Wolf Void Ray | Strafe RGB MX Silent
iPhone 8 Plus ZTE Axon 7 | iPad Air 2 | Nvidia Shield Tablet 32gig LTE | Lenovo W700DS

Link to post
Share on other sites
Just now, dtaflorida said:

OP said his paypal got locked. Is this affecting paypal? 

I can't confirm this but it's extremely coincidental. I'll be contacting paypal business support during my lunch to confirm with them if this is related.

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

LinusWare Dev | NotCPUCores Dev

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX480 8GB OC, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to post
Share on other sites

Yup, just got an email from Newegg:

 

neweggmalware.JPG

==ECHELON (Main Rig)==

CPU | AMD Ryzen 7 1700x @ 3.4 GHz
Mobo | Asus ROG Strix X370-F Gaming

GPU | Sapphire NITRO+ RX-580

RAM | 16GB Corsair Vengeance LPX @ 2133

SSD | Plextor 512GB

HDD | 3x WD Black 3TB

PSU | EVGA 750G2

Case | Fractal Design Define R6

Disp | 2 x Acer K242HQL

Keys | Corsair K70 RGB Mk2, MX-Red

Mouse | Logitech M215v2 Wireless

 

==Snow (Server)==

APU | AMD A6-5400K

Mobo | ASRock FM2-A88XM

RAM | 4GB Kingston ValuRAM

SSD | 120GB Adata

HDD | 2x Toshiba 3TB, 3x Hitachi 2TB

PSU | EVGA 600B

Case | Cooler Master N300

 

==DISHFIRE (laptop)==

MODEL | Asus X550IU "Signature Edition" (whatever that means)

APU | AMD FX-9830P with Radeon R7 Graphics
GPU | Radeon RX-460

SSD | Mushkin Triactor 500GB

HDD | 1x HGST 1TB

Link to post
Share on other sites
1 minute ago, Pretzel4000 said:

Yup, just got an email from Newegg:

 

neweggmalware.JPG

Mind if I add this to the original post?

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

LinusWare Dev | NotCPUCores Dev

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX480 8GB OC, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to post
Share on other sites

@rcmaehl Go ahead.

==ECHELON (Main Rig)==

CPU | AMD Ryzen 7 1700x @ 3.4 GHz
Mobo | Asus ROG Strix X370-F Gaming

GPU | Sapphire NITRO+ RX-580

RAM | 16GB Corsair Vengeance LPX @ 2133

SSD | Plextor 512GB

HDD | 3x WD Black 3TB

PSU | EVGA 750G2

Case | Fractal Design Define R6

Disp | 2 x Acer K242HQL

Keys | Corsair K70 RGB Mk2, MX-Red

Mouse | Logitech M215v2 Wireless

 

==Snow (Server)==

APU | AMD A6-5400K

Mobo | ASRock FM2-A88XM

RAM | 4GB Kingston ValuRAM

SSD | 120GB Adata

HDD | 2x Toshiba 3TB, 3x Hitachi 2TB

PSU | EVGA 600B

Case | Cooler Master N300

 

==DISHFIRE (laptop)==

MODEL | Asus X550IU "Signature Edition" (whatever that means)

APU | AMD FX-9830P with Radeon R7 Graphics
GPU | Radeon RX-460

SSD | Mushkin Triactor 500GB

HDD | 1x HGST 1TB

Link to post
Share on other sites

I have bought a few things during the affected period. :(

 

==ECHELON (Main Rig)==

CPU | AMD Ryzen 7 1700x @ 3.4 GHz
Mobo | Asus ROG Strix X370-F Gaming

GPU | Sapphire NITRO+ RX-580

RAM | 16GB Corsair Vengeance LPX @ 2133

SSD | Plextor 512GB

HDD | 3x WD Black 3TB

PSU | EVGA 750G2

Case | Fractal Design Define R6

Disp | 2 x Acer K242HQL

Keys | Corsair K70 RGB Mk2, MX-Red

Mouse | Logitech M215v2 Wireless

 

==Snow (Server)==

APU | AMD A6-5400K

Mobo | ASRock FM2-A88XM

RAM | 4GB Kingston ValuRAM

SSD | 120GB Adata

HDD | 2x Toshiba 3TB, 3x Hitachi 2TB

PSU | EVGA 600B

Case | Cooler Master N300

 

==DISHFIRE (laptop)==

MODEL | Asus X550IU "Signature Edition" (whatever that means)

APU | AMD FX-9830P with Radeon R7 Graphics
GPU | Radeon RX-460

SSD | Mushkin Triactor 500GB

HDD | 1x HGST 1TB

Link to post
Share on other sites
13 minutes ago, VegetableStu said:

well actual shit. he bought half his rig from newegg on monday.

That sucks. I bought my new GPU on 03 Sep :(

==ECHELON (Main Rig)==

CPU | AMD Ryzen 7 1700x @ 3.4 GHz
Mobo | Asus ROG Strix X370-F Gaming

GPU | Sapphire NITRO+ RX-580

RAM | 16GB Corsair Vengeance LPX @ 2133

SSD | Plextor 512GB

HDD | 3x WD Black 3TB

PSU | EVGA 750G2

Case | Fractal Design Define R6

Disp | 2 x Acer K242HQL

Keys | Corsair K70 RGB Mk2, MX-Red

Mouse | Logitech M215v2 Wireless

 

==Snow (Server)==

APU | AMD A6-5400K

Mobo | ASRock FM2-A88XM

RAM | 4GB Kingston ValuRAM

SSD | 120GB Adata

HDD | 2x Toshiba 3TB, 3x Hitachi 2TB

PSU | EVGA 600B

Case | Cooler Master N300

 

==DISHFIRE (laptop)==

MODEL | Asus X550IU "Signature Edition" (whatever that means)

APU | AMD FX-9830P with Radeon R7 Graphics
GPU | Radeon RX-460

SSD | Mushkin Triactor 500GB

HDD | 1x HGST 1TB

Link to post
Share on other sites

does this affect transactions in that date range with the card already existing before 14 august? o_o (going by the nature of the number needing to be entered)

Link to post
Share on other sites
1 minute ago, VegetableStu said:

does this affect transactions in that date range with the card already existing before 14 august? o_o (going by the nature of the number needing to be entered)

Any data added, to the page during that period such as a new card or verifying an old card by re-entering the card number is likely affected. If you did not enter the full card number you should be fine.

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

LinusWare Dev | NotCPUCores Dev

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX480 8GB OC, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to post
Share on other sites
Just now, rcmaehl said:

Any data added, to the page during that period such as a new card or verifying an old card by re-entering the card number is likely affected. If you did not enter the full card number you should be fine.

ahh okay

 

nevermind though, friend made an account in that affected period. already checking all the sketchy boxes but I don't think he received the email.

no bad transactions so far but I already communicated the safe option to him (that is to get a new card)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×