Jump to content

[UPDATED] Newegg Breached by Magecart Card Skimmer

rcmaehl
 Share

Source:

RiskIq

TechCrunch

 

TL;DR:

If you purchased an item between August 14 and September 18 on Newegg, you may need to call your bank

 

Media (courtsey @Pretzel4000):

neweggmalware.JPG

 

 

Quotes/Excerpts:

Quote

Newegg is clearing up its website after a month-long data breach. Hackers injected 15 lines of card skimming code on the online retailer’s payments page... between August 14 and September 18. The code siphoned off credit card data from unsuspecting customers. The code also worked for both desktop and mobile customers — though it’s unclear if mobile customers are affected. The online electronics retailer removed the code on Tuesday after it was contacted by incident response firm Volexity. When reached, a Newegg spokesperson did not immediately comment. “The breach of Newegg shows the true extent of Magecart operators’ reach,” The hackers “integrated with the victim’s payment system and blended with the infrastructure and stayed there as long as possible.” Anyone who entered their credit card data during the period should immediately contact their banks.

 

My Thoughts:

With the scope of Magecart, we may start seeing additional websites reporting the same thing shortly. If you have purchased from newegg recently, be sure to contact your bank!

Edited by rcmaehl
Add image. Courtsey Pretzel4000

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX5700 XT 8GB Sapphire Nitro+, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to comment
Share on other sites

Link to post
Share on other sites

Link to comment
Share on other sites

Link to post
Share on other sites

!@#$

 

Paypal has locked my account and any transactions. Related?

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX5700 XT 8GB Sapphire Nitro+, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to comment
Share on other sites

Link to post
Share on other sites

3 minutes ago, rcmaehl said:

!@#$

 

It seemingly affects paypal too. Paypal has locked my account and any transactions

 

FUCK, I just bought something on Newegg 2 days ago.

 

Does it affect paypal transactions? I haven't heard anything from Paypal, and as far as I know, Paypal doesn't share payment info with the seller website? ?

 

Link to comment
Share on other sites

Link to post
Share on other sites

1 minute ago, maartendc said:

 

FUCK, I just bought something on Newegg 2 days ago.

 

Does it affect paypal transactions? I haven't heard anything from Paypal, and as far as I know, Paypal doesn't share payment info with the seller website? ?

 

No pending transactions but I logged in yesterday no problem to purchase from newegg. Today, all of a sudden it's asking for password changes and PIN setup.

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX5700 XT 8GB Sapphire Nitro+, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to comment
Share on other sites

Link to post
Share on other sites

4 minutes ago, valdyrgramr said:

Checks Newegg order history

Oh good, I bought the x399 and Ripjaw a month before that happened.

Nice, I was debating whether to order a power supply of amazon or Newegg two days ago, chose amazon so I’m safe too lol.

Link to comment
Share on other sites

Link to post
Share on other sites

Just checked my PayPal but it hasn't prompted me for password or PIN changes. I may have placed my order just after they fixed it. I put it in at 2:29PM EST

Link to comment
Share on other sites

Link to post
Share on other sites

OP said his paypal got locked. Is this affecting paypal? 

 

 

Ryzen 7 2700x | MSI B450 Tomahawk | GTX 780 Windforce | 16GB 3200
Dell 3007WFP | 2xDell 2001FP | Logitech G710 | Logitech G710 | Team Wolf Void Ray | Strafe RGB MX Silent
iPhone 8 Plus ZTE Axon 7 | iPad Air 2 | Nvidia Shield Tablet 32gig LTE | Lenovo W700DS

Link to comment
Share on other sites

Link to post
Share on other sites

Just now, dtaflorida said:

OP said his paypal got locked. Is this affecting paypal? 

I can't confirm this but it's extremely coincidental. I'll be contacting paypal business support during my lunch to confirm with them if this is related.

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX5700 XT 8GB Sapphire Nitro+, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to comment
Share on other sites

Link to post
Share on other sites

Yup, just got an email from Newegg:

 

neweggmalware.JPG

==ECHELON (Main Rig)==

CPU | AMD Ryzen 7 1700x @ 3.4 GHz
Mobo | Asus ROG Strix X370-F Gaming

GPU | Sapphire NITRO+ RX-580

RAM | 16GB Corsair Vengeance LPX @ 2133

SSD | Plextor 512GB

HDD | 3x WD Black 3TB

PSU | EVGA 750G2

Case | Fractal Design Define R6

Disp | 2 x Acer K242HQL

Keys | Corsair K70 RGB Mk2, MX-Red

Mouse | Logitech M215v2 Wireless

 

==Snow (Server)==

APU | AMD A6-5400K

Mobo | ASRock FM2-A88XM

RAM | 4GB Kingston ValuRAM

SSD | 120GB Adata

HDD | 2x Toshiba 3TB, 3x Hitachi 2TB

PSU | EVGA 600B

Case | Cooler Master N300

 

==DISHFIRE (laptop)==

MODEL | Asus X550IU "Signature Edition" (whatever that means)

APU | AMD FX-9830P with Radeon R7 Graphics
GPU | Radeon RX-460

SSD | Mushkin Triactor 500GB

HDD | 1x HGST 1TB

Link to comment
Share on other sites

Link to post
Share on other sites

1 minute ago, Pretzel4000 said:

Yup, just got an email from Newegg:

 

neweggmalware.JPG

Mind if I add this to the original post?

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX5700 XT 8GB Sapphire Nitro+, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to comment
Share on other sites

Link to post
Share on other sites

@rcmaehl Go ahead.

==ECHELON (Main Rig)==

CPU | AMD Ryzen 7 1700x @ 3.4 GHz
Mobo | Asus ROG Strix X370-F Gaming

GPU | Sapphire NITRO+ RX-580

RAM | 16GB Corsair Vengeance LPX @ 2133

SSD | Plextor 512GB

HDD | 3x WD Black 3TB

PSU | EVGA 750G2

Case | Fractal Design Define R6

Disp | 2 x Acer K242HQL

Keys | Corsair K70 RGB Mk2, MX-Red

Mouse | Logitech M215v2 Wireless

 

==Snow (Server)==

APU | AMD A6-5400K

Mobo | ASRock FM2-A88XM

RAM | 4GB Kingston ValuRAM

SSD | 120GB Adata

HDD | 2x Toshiba 3TB, 3x Hitachi 2TB

PSU | EVGA 600B

Case | Cooler Master N300

 

==DISHFIRE (laptop)==

MODEL | Asus X550IU "Signature Edition" (whatever that means)

APU | AMD FX-9830P with Radeon R7 Graphics
GPU | Radeon RX-460

SSD | Mushkin Triactor 500GB

HDD | 1x HGST 1TB

Link to comment
Share on other sites

Link to post
Share on other sites

I have bought a few things during the affected period. :(

 

==ECHELON (Main Rig)==

CPU | AMD Ryzen 7 1700x @ 3.4 GHz
Mobo | Asus ROG Strix X370-F Gaming

GPU | Sapphire NITRO+ RX-580

RAM | 16GB Corsair Vengeance LPX @ 2133

SSD | Plextor 512GB

HDD | 3x WD Black 3TB

PSU | EVGA 750G2

Case | Fractal Design Define R6

Disp | 2 x Acer K242HQL

Keys | Corsair K70 RGB Mk2, MX-Red

Mouse | Logitech M215v2 Wireless

 

==Snow (Server)==

APU | AMD A6-5400K

Mobo | ASRock FM2-A88XM

RAM | 4GB Kingston ValuRAM

SSD | 120GB Adata

HDD | 2x Toshiba 3TB, 3x Hitachi 2TB

PSU | EVGA 600B

Case | Cooler Master N300

 

==DISHFIRE (laptop)==

MODEL | Asus X550IU "Signature Edition" (whatever that means)

APU | AMD FX-9830P with Radeon R7 Graphics
GPU | Radeon RX-460

SSD | Mushkin Triactor 500GB

HDD | 1x HGST 1TB

Link to comment
Share on other sites

Link to post
Share on other sites

13 minutes ago, VegetableStu said:

well actual shit. he bought half his rig from newegg on monday.

That sucks. I bought my new GPU on 03 Sep :(

==ECHELON (Main Rig)==

CPU | AMD Ryzen 7 1700x @ 3.4 GHz
Mobo | Asus ROG Strix X370-F Gaming

GPU | Sapphire NITRO+ RX-580

RAM | 16GB Corsair Vengeance LPX @ 2133

SSD | Plextor 512GB

HDD | 3x WD Black 3TB

PSU | EVGA 750G2

Case | Fractal Design Define R6

Disp | 2 x Acer K242HQL

Keys | Corsair K70 RGB Mk2, MX-Red

Mouse | Logitech M215v2 Wireless

 

==Snow (Server)==

APU | AMD A6-5400K

Mobo | ASRock FM2-A88XM

RAM | 4GB Kingston ValuRAM

SSD | 120GB Adata

HDD | 2x Toshiba 3TB, 3x Hitachi 2TB

PSU | EVGA 600B

Case | Cooler Master N300

 

==DISHFIRE (laptop)==

MODEL | Asus X550IU "Signature Edition" (whatever that means)

APU | AMD FX-9830P with Radeon R7 Graphics
GPU | Radeon RX-460

SSD | Mushkin Triactor 500GB

HDD | 1x HGST 1TB

Link to comment
Share on other sites

Link to post
Share on other sites

1 minute ago, VegetableStu said:

does this affect transactions in that date range with the card already existing before 14 august? o_o (going by the nature of the number needing to be entered)

Any data added, to the page during that period such as a new card or verifying an old card by re-entering the card number is likely affected. If you did not enter the full card number you should be fine.

PLEASE QUOTE ME IF YOU ARE REPLYING TO ME

Desktop Build: Ryzen 7 1800X @ 4.0GHz, AsRock Fatal1ty X370 Professional Gaming, 32GB Corsair DDR4 @ 3000MHz, RX5700 XT 8GB Sapphire Nitro+, Benq XL2730 1440p 144Hz FS

Retro Build: Intel Pentium III @ 500 MHz, Dell Optiplex G1 Full AT Tower, 768MB SDRAM @ 133MHz, Integrated Graphics, Generic 1024x768 60Hz Monitor


 

Link to comment
Share on other sites

Link to post
Share on other sites

I haven't got the email yet but i bought a complete PC from them in this date range. I assume it affect both the .com and .ca

Link to comment
Share on other sites

Link to post
Share on other sites

Did this take any info from new accounts registered (and put card info in after that) during that period that didn't check out or did this happen in the checkout area only? 

Link to comment
Share on other sites

Link to post
Share on other sites

Ive literally bought 5 items just this week from them.  And I JUST posted a rant review about them LOL.

Workstation Laptop: Dell Precision 7540, Xeon E-2276M, 32gb DDR4, Quadro T2000 GPU, 4k display

Wifes Rig: ASRock B550m Riptide, Ryzen 5 5600X, Sapphire Nitro+ RX 6700 XT, 16gb (2x8) 3600mhz V-Color Skywalker RAM, ARESGAME AGS 850w PSU, 1tb WD Black SN750, 500gb Crucial m.2, DIYPC MA01-G case

My Rig: ASRock B450m Pro4, Ryzen 5 3600, ARESGAME River 5 CPU cooler, EVGA RTX 2060 KO, 16gb (2x8) 3600mhz TeamGroup T-Force RAM, ARESGAME AGV750w PSU, 1tb WD Black SN750 NVMe Win 10 boot drive, 3tb Hitachi 7200 RPM HDD, Fractal Design Focus G Mini custom painted.  

NVIDIA GeForce RTX 2060 video card benchmark result - AMD Ryzen 5 3600,ASRock B450M Pro4 (3dmark.com)

Daughter 1 Rig: ASrock B450 Pro4, Ryzen 7 1700 @ 4.2ghz all core 1.4vCore, AMD R9 Fury X w/ Swiftech KOMODO waterblock, Custom Loop 2x240mm + 1x120mm radiators in push/pull 16gb (2x8) Patriot Viper CL14 2666mhz RAM, Corsair HX850 PSU, 250gb Samsun 960 EVO NVMe Win 10 boot drive, 500gb Samsung 840 EVO SSD, 512GB TeamGroup MP30 M.2 SATA III SSD, SuperTalent 512gb SATA III SSD, CoolerMaster HAF XM Case. 

https://www.3dmark.com/3dm/37004594?

Daughter 2 Rig: ASUS B350-PRIME ATX, Ryzen 7 1700, Sapphire Nitro+ R9 Fury Tri-X, 16gb (2x8) 3200mhz V-Color Skywalker, ANTEC Earthwatts 750w PSU, MasterLiquid Lite 120 AIO cooler in Push/Pull config as rear exhaust, 250gb Samsung 850 Evo SSD, Patriot Burst 240gb SSD, Cougar MX330-X Case

 

Link to comment
Share on other sites

Link to post
Share on other sites

I bought something on 8/11 and haven't received an email, so it looks like I just missed it.

Chris Porten

Link to comment
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share


×