{"id":477919,"date":"2023-08-09T09:22:33","date_gmt":"2023-08-09T09:22:33","guid":{"rendered":""},"modified":"2023-09-05T11:15:42","modified_gmt":"2023-09-05T11:15:42","slug":"magecart","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/magecart\/","title":{"rendered":"\u9b54\u6cd5\u8f66"},"content":{"rendered":"<p>\u5173\u4e8e Magecart \u7684\u7b80\u8981\u4fe1\u606f<\/p>\n<p>Magecart \u662f\u4e00\u4e2a\u672f\u8bed\uff0c\u7528\u4e8e\u63cf\u8ff0\u5404\u79cd\u7f51\u7edc\u72af\u7f6a\u56e2\u4f19\u53ca\u5176\u5b9e\u65bd\u6570\u5b57\u4fe1\u7528\u5361\u76d7\u7a83\u7684\u7b56\u7565\u3002\u8fd9\u4e9b\u56e2\u4f19\u4ee5\u7535\u5b50\u5546\u52a1\u7f51\u7ad9\u7684\u5728\u7ebf\u652f\u4ed8\u65b9\u5f0f\u4e3a\u76ee\u6807\uff0c\u4ee5\u83b7\u53d6\u548c\u7a83\u53d6\u654f\u611f\u7684\u5ba2\u6237\u6570\u636e\u3002Magecart \u653b\u51fb\u5e26\u6765\u7684\u5a01\u80c1\u975e\u5e38\u4e25\u91cd\uff0c\u5bf9\u4f01\u4e1a\u3001\u6d88\u8d39\u8005\u548c\u91d1\u878d\u673a\u6784\u90fd\u6709\u5f71\u54cd\u3002<\/p>\n<h2>Magecart \u7684\u8d77\u6e90\u5386\u53f2\u53ca\u5176\u9996\u6b21\u63d0\u53ca<\/h2>\n<p>Magecart \u7684\u5386\u53f2\u53ef\u4ee5\u8ffd\u6eaf\u5230 2015 \u5e74\uff0c\u5f53\u65f6\u7f51\u7edc\u5b89\u5168\u516c\u53f8\u5f00\u59cb\u6ce8\u610f\u5230\u5404\u79cd\u7535\u5b50\u5546\u52a1\u7f51\u7ad9\u4e0a\u7684\u5728\u7ebf\u4fe1\u7528\u5361\u76d7\u7a83\u6a21\u5f0f\u3002\u653b\u51fb\u8005\u88ab\u53d1\u73b0\u5728\u7ed3\u5e10\u9875\u9762\u4e2d\u6ce8\u5165\u6076\u610f JavaScript \u4ee3\u7801\u6765\u7a83\u53d6\u4fe1\u7528\u5361\u4fe1\u606f\u3002<\/p>\n<p>\u968f\u7740\u65f6\u95f4\u63a8\u79fb\uff0c\u8fd9\u4e9b\u653b\u51fb\u53d8\u5f97\u8d8a\u6765\u8d8a\u590d\u6742\uff0c\u65b0\u7684\u653b\u51fb\u56e2\u4f53\u4e0d\u65ad\u6d8c\u73b0\uff0c\u4eba\u4eec\u521b\u9020\u4e86\u201cMagecart\u201d\u4e00\u8bcd\u6765\u63cf\u8ff0\u8fd9\u4e9b\u6d3b\u52a8\u3002\u8fd9\u4e2a\u540d\u5b57\u672c\u8eab\u6e90\u4e8e Magento \u7535\u5b50\u5546\u52a1\u5e73\u53f0\uff0c\u5b83\u662f\u6700\u65e9\u548c\u6700\u53d7\u653b\u51fb\u7684\u7cfb\u7edf\u4e4b\u4e00\u3002<\/p>\n<h2>\u5173\u4e8e Magecart \u7684\u8be6\u7ec6\u4fe1\u606f\uff1a\u6269\u5c55\u4e3b\u9898 Magecart<\/h2>\n<p>Magecart \u653b\u51fb\u901a\u5e38\u901a\u8fc7\u5229\u7528\u7b2c\u4e09\u65b9\u7ec4\u4ef6\u4e2d\u7684\u5df2\u77e5\u6f0f\u6d1e\u6765\u5165\u4fb5\u7f51\u7ad9\u3002\u4e00\u65e6\u7f51\u7ad9\u88ab\u653b\u7834\uff0c\u653b\u51fb\u8005\u5c31\u4f1a\u63d2\u5165\u6076\u610f\u4ee3\u7801\uff0c\u62e6\u622a\u6beb\u65e0\u6212\u5fc3\u7684\u5ba2\u6237\u8f93\u5165\u7684\u4ed8\u6b3e\u4fe1\u606f\u3002\u7136\u540e\uff0c\u8fd9\u4e9b\u4fe1\u606f\u4f1a\u88ab\u53d1\u9001\u5230\u653b\u51fb\u8005\u63a7\u5236\u7684\u670d\u52a1\u5668\u3002<\/p>\n<p>Magecart \u6700\u4ee4\u4eba\u62c5\u5fe7\u7684\u4e00\u70b9\u662f\u5176\u6301\u7eed\u7684\u6f14\u53d8\u3002\u867d\u7136\u6700\u521d\u7684\u76ee\u6807\u662f Magento \u7b49\u7535\u5b50\u5546\u52a1\u5e73\u53f0\uff0c\u4f46\u5b83\u5df2\u7ecf\u6269\u5c55\u5230\u5176\u4ed6\u5e73\u53f0\uff0c\u5305\u62ec Shopify \u548c BigCommerce\u3002<\/p>\n<h3>\u5f71\u54cd\uff1a<\/h3>\n<ul>\n<li><strong>\u6d88\u8d39\u8005\uff1a<\/strong> \u4e2a\u4eba\u548c\u8d22\u52a1\u6570\u636e\u9762\u4e34\u98ce\u9669\u3002<\/li>\n<li><strong>\u4f01\u4e1a\uff1a<\/strong> \u540d\u8a89\u635f\u5bb3\u3001\u8d22\u52a1\u635f\u5931\u4ee5\u53ca\u6f5c\u5728\u7684\u6cd5\u5f8b\u540e\u679c\u3002<\/li>\n<li><strong>\u94f6\u884c\u548c\u91d1\u878d\u673a\u6784\uff1a<\/strong> \u6b3a\u8bc8\u548c\u7ea0\u7eb7\u7d22\u8d54\u589e\u52a0\u3002<\/li>\n<\/ul>\n<h2>Magecart \u7684\u5185\u90e8\u7ed3\u6784\uff1aMagecart \u7684\u5de5\u4f5c\u539f\u7406<\/h2>\n<p>Magecart \u7531\u591a\u4e2a\u72ec\u7acb\u8fd0\u4f5c\u4f46\u9075\u5faa\u7c7b\u4f3c\u7b56\u7565\u7684\u56e2\u4f53\u548c\u4e2a\u4eba\u7ec4\u6210\u3002<\/p>\n<ol>\n<li><strong>\u6d78\u6da6\uff1a<\/strong> \u5229\u7528\u76ee\u6807\u7f51\u7ad9\u7684\u6f0f\u6d1e\u3002<\/li>\n<li><strong>\u4ee3\u7801\u6ce8\u5165\uff1a<\/strong> \u5728\u4ed8\u6b3e\u6216\u7ed3\u8d26\u9875\u9762\u63d2\u5165\u6076\u610f JavaScript \u4ee3\u7801\u3002<\/li>\n<li><strong>\u6570\u636e\u6d4f\u89c8\uff1a<\/strong> \u5728\u8f93\u5165\u5ba2\u6237\u4ed8\u6b3e\u4fe1\u606f\u65f6\u6355\u83b7\u5b83\u3002<\/li>\n<li><strong>\u6570\u636e\u6cc4\u9732\uff1a<\/strong> \u5c06\u6d4f\u89c8\u7684\u6570\u636e\u53d1\u9001\u5230\u53d7\u63a7\u670d\u52a1\u5668\u3002<\/li>\n<\/ol>\n<h2>Magecart \u4e3b\u8981\u529f\u80fd\u5206\u6790<\/h2>\n<ul>\n<li><strong>\u9690\u8eab\uff1a<\/strong> \u4ee3\u7801\u901a\u5e38\u88ab\u6df7\u6dc6\uff0c\u4f7f\u5f97\u68c0\u6d4b\u53d8\u5f97\u56f0\u96be\u3002<\/li>\n<li><strong>\u591a\u529f\u80fd\u6027\uff1a<\/strong> \u53ef\u4ee5\u9488\u5bf9\u5404\u79cd\u5e73\u53f0\u548c\u652f\u4ed8\u7cfb\u7edf\u3002<\/li>\n<li><strong>\u5f39\u529b\uff1a<\/strong> \u7ee7\u7eed\u8fdb\u5316\u4ee5\u7ed5\u8fc7\u5b89\u5168\u63aa\u65bd\u3002<\/li>\n<\/ul>\n<h2>Magecart \u7684\u7c7b\u578b\uff1a\u5168\u9762\u6982\u8ff0<\/h2>\n<table>\n<thead>\n<tr>\n<th><strong>\u56e2\u4f53<\/strong><\/th>\n<th><strong>\u5df2\u77e5\u76ee\u6807<\/strong><\/th>\n<th><strong>\u503c\u5f97\u6ce8\u610f\u7684\u6280\u672f<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u9b54\u6cd5\u8f66 1<\/td>\n<td>\u9a6c\u6839\u6258<\/td>\n<td>\u57fa\u672c\u7565\u8bfb\u811a\u672c<\/td>\n<\/tr>\n<tr>\n<td>\u9b54\u6cd5\u53612<\/td>\n<td>\u5404\u7c7b\u7535\u5b50\u5546\u52a1<\/td>\n<td>\u9ad8\u7ea7\u4ee3\u7801\u6df7\u6dc6<\/td>\n<\/tr>\n<tr>\n<td>\u9b54\u6cd5\u53613<\/td>\n<td>\u7b2c\u4e09\u65b9\u4f9b\u5e94\u5546<\/td>\n<td>\u9488\u5bf9\u7b2c\u4e09\u65b9\u7ec4\u4ef6<\/td>\n<\/tr>\n<tr>\n<td>\u2026<\/td>\n<td>\u2026<\/td>\n<td>\u2026<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Magecart \u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u4f7f\u7528\u8fc7\u7a0b\u4e2d\u51fa\u73b0\u7684\u95ee\u9898\u53ca\u89e3\u51b3\u65b9\u6cd5<\/h2>\n<h3>\u5bf9\u6297 Magecart \u7684\u65b9\u6cd5\uff1a<\/h3>\n<ul>\n<li>\u5b9a\u671f\u66f4\u65b0\u548c\u8865\u4e01<\/li>\n<li>\u5b9e\u65bd\u5185\u5bb9\u5b89\u5168\u7b56\u7565 (CSP)<\/li>\n<li>\u5229\u7528\u5b89\u5168\u5de5\u5177\u76d1\u63a7\u548c\u68c0\u6d4b\u53ef\u7591\u6d3b\u52a8<\/li>\n<\/ul>\n<h3>\u95ee\u9898\uff1a<\/h3>\n<ul>\n<li>\u5feb\u901f\u8fdb\u5316\uff1aMagecart \u4e0d\u65ad\u9002\u5e94\uff0c\u4f7f\u5f97\u68c0\u6d4b\u53d8\u5f97\u66f4\u52a0\u56f0\u96be\u3002<\/li>\n<li>\u5f71\u54cd\u8303\u56f4\u5e7f\u6cdb\uff1a\u53ef\u4ee5\u540c\u65f6\u5f71\u54cd\u8bb8\u591a\u5ba2\u6237\u548c\u4f9b\u5e94\u5546\u3002<\/li>\n<\/ul>\n<h3>\u89e3\u51b3\u65b9\u6848\uff1a<\/h3>\n<ul>\n<li>\u884c\u4e1a\u53c2\u4e0e\u8005\u4e4b\u95f4\u7684\u5408\u4f5c\u52aa\u529b<\/li>\n<li>\u91c7\u7528\u5148\u8fdb\u7684\u5b89\u5168\u63aa\u65bd\uff0c\u4f8b\u5982\u7aef\u5230\u7aef\u52a0\u5bc6<\/li>\n<\/ul>\n<h2>\u4e3b\u8981\u7279\u70b9\u53ca\u5176\u4ed6\u4e0e\u540c\u7c7b\u4ea7\u54c1\u7684\u6bd4\u8f83<\/h2>\n<ul>\n<li><strong>Magecart \u4e0e\u5178\u578b\u7f51\u7edc\u9493\u9c7c\u7684\u533a\u522b\uff1a<\/strong>\n<ul>\n<li><strong>\u9b54\u6cd5\u8f66\uff1a<\/strong> \u4ee5\u7f51\u7ad9\u4e3a\u76ee\u6807\u76f4\u63a5\u6d4f\u89c8\u6570\u636e\u3002<\/li>\n<li><strong>\u7f51\u7edc\u9493\u9c7c\uff1a<\/strong> \u5f15\u8bf1\u53d7\u5bb3\u8005\u8bbf\u95ee\u6b3a\u8bc8\u7f51\u7ad9\u3002<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3>\u53ef\u4ee5\u6839\u636e\u653b\u51fb\u5a92\u4ecb\u3001\u5f71\u54cd\u548c\u7f13\u89e3\u7b56\u7565\u4e0e\u52d2\u7d22\u8f6f\u4ef6\u3001\u6076\u610f\u8f6f\u4ef6\u7b49\u8fdb\u884c\u5176\u4ed6\u6bd4\u8f83\u3002<\/h3>\n<h2>\u4e0e Magecart \u76f8\u5173\u7684\u672a\u6765\u89c2\u70b9\u548c\u6280\u672f<\/h2>\n<ul>\n<li>\u4eba\u5de5\u667a\u80fd\u9a71\u52a8\u7684\u68c0\u6d4b\u5de5\u5177\u7684\u5f00\u53d1<\/li>\n<li>\u5168\u7403\u5f53\u5c40\u5408\u4f5c\u6709\u6548\u6253\u51fb<\/li>\n<li>\u66f4\u5f3a\u5927\u7684\u5728\u7ebf\u4ea4\u6613\u5b89\u5168\u534f\u8bae<\/li>\n<\/ul>\n<h2>\u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5c06\u5176\u4e0e Magecart \u5173\u8054<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\u65e2\u53ef\u4ee5\u51cf\u8f7b Magecart \u98ce\u9669\uff0c\u4e5f\u53ef\u4ee5\u52a0\u5267\u5176\u98ce\u9669\u3002<\/p>\n<ul>\n<li><strong>\u51cf\u8f7b\uff1a<\/strong> \u901a\u8fc7\u8fc7\u6ee4\u7f51\u7edc\u5185\u5bb9\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u963b\u6b62\u5df2\u77e5\u7684 Magecart \u57df\u3002<\/li>\n<li><strong>\u6076\u5316\uff1a<\/strong> Magecart \u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6765\u9690\u85cf\u5176\u771f\u5b9e\u4f4d\u7f6e\u3002<\/li>\n<\/ul>\n<p>\u4e86\u89e3 Magecart \u653b\u51fb\u7684\u6027\u8d28\u5bf9\u4e8e\u5236\u5b9a\u6709\u6548\u7684\u5b89\u5168\u63aa\u65bd\u81f3\u5173\u91cd\u8981\uff0c\u5305\u62ec\u8d1f\u8d23\u4efb\u5730\u4f7f\u7528 OneProxy \u63d0\u4f9b\u7684\u4ee3\u7406\u670d\u52a1\u5668\u3002<\/p>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<ul>\n<li><a href=\"https:\/\/www.riskiq.com\/research\/magecart-report\/\" target=\"_new\" rel=\"noopener nofollow\">RiskIQ \u7684 Magecart \u5206\u6790<\/a><\/li>\n<li><a href=\"https:\/\/www.symantec.com\/blogs\/threat-intelligence\/magecart-fin7-symlink\" target=\"_new\" rel=\"noopener nofollow\">\u8d5b\u95e8\u94c1\u514b\u5173\u4e8e Magecart \u7684\u62a5\u544a<\/a><\/li>\n<li><a href=\"https:\/\/oneproxy.pro\/cn\/security-solutions\/\" target=\"_new\" rel=\"noopener\">OneProxy \u7684\u5b89\u5168\u89e3\u51b3\u65b9\u6848<\/a><\/li>\n<\/ul>\n<p>\u6ce8\u610f\uff1a\u59cb\u7ec8\u786e\u4fdd\u9075\u5faa\u7f51\u7edc\u5b89\u5168\u7684\u6700\u4f73\u5b9e\u8df5\uff0c\u5e76\u9488\u5bf9\u5177\u4f53\u9700\u6c42\u54a8\u8be2\u5b89\u5168\u4e13\u4e1a\u4eba\u5458\u3002<\/p>","protected":false},"featured_media":468838,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477919","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Magecart: An In-Depth Analysis<\/mark>","faq_items":[{"question":"What is Magecart and why is it important to understand?","answer":"<p>Magecart refers to various cybercriminal groups that engage in digital credit card theft by targeting online payment forms on e-commerce sites. Understanding Magecart is crucial for consumers, businesses, and financial institutions to safeguard personal and financial data, and to implement appropriate security measures.<\/p>"},{"question":"How did Magecart originate and what platforms does it primarily target?","answer":"<p>Magecart originated around 2015 when cybersecurity firms identified a pattern of credit card theft from e-commerce sites. Initially, the attacks were mostly targeted at Magento, but they have since expanded to include other platforms like Shopify and BigCommerce.<\/p>"},{"question":"How does Magecart operate and what are its key features?","answer":"<p>Magecart operates by exploiting vulnerabilities in websites to inject malicious JavaScript code into payment or checkout pages. The key features include stealth through code obfuscation, versatility in targeting various platforms, and resilience in evolving to bypass security measures.<\/p>"},{"question":"What types of Magecart are there?","answer":"<p>There are several groups and individuals operating under the Magecart umbrella, each with different targets and techniques. For example, Magecart Group 1 primarily targets Magento using basic skimming scripts, while Magecart Group 2 uses advanced code obfuscation techniques.<\/p>"},{"question":"How can individuals and businesses protect against Magecart attacks?","answer":"<p>Protection against Magecart requires regular updates and patches, implementing Content Security Policies (CSP), utilizing security tools to monitor and detect suspicious activities, and adopting advanced security measures like end-to-end encryption.<\/p>"},{"question":"What future technologies and perspectives are related to Magecart?","answer":"<p>Future perspectives related to Magecart include the development of AI-driven detection tools, global collaboration between authorities for an effective crackdown, and the establishment of more robust security protocols for online transactions.<\/p>"},{"question":"How are proxy servers like OneProxy related to Magecart?","answer":"<p>Proxy servers can have a dual role concerning Magecart. They can be used to mitigate risks by filtering web content and blocking known Magecart domains. Conversely, Magecart attackers can also use proxy servers to hide their true locations, making understanding and proper use of proxy servers essential in the fight against Magecart.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477919","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477919\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/468838"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=477919"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}