HT TECH wants to start sending you push notifications. Click allow to subscribe

Formjacking explained: How hackers target online shoppers, virtually skim card details

Hackers are selling your card details for 3,000 on dark web using a new ‘formjacking’ technique. Here’s everything you need to know.

By: KUL BHUSHAN
Updated on: Aug 20 2022, 13:29 IST
How formjacking attack works. (Getty Images/iStockphoto)
How formjacking attack works. (Getty Images/iStockphoto)

Online shopping has grown exponentially around the world. Just in India alone, the e-commerce market is expected to hit $150 billion by 2022. Even as more and more consumers go online, cyber criminals are finding new ways to dupe users and steal their private data. The latest is 'formjacking', a new hacking technique that targets online shoppers.

Formjacking is essentially a virtual ATM skimming technique under which cyber criminals target website of a retailer by injecting malicious codes. These codes give away access to online shoppers' payment details including sensitive card details.

You may be interested in

Mobiles Tablets Laptops
7% OFF
Apple iPhone 15 Pro Max
  • Black Titanium
  • 8 GB RAM
  • 256 GB Storage
₹148,900₹159,900
Buy now
23% OFF
Samsung Galaxy S23 Ultra 5G
  • Green
  • 12 GB RAM
  • 256 GB Storage
₹115,999₹149,999
Buy now
Google Pixel 8 Pro
  • Obsidian
  • 12 GB RAM
  • 128 GB Storage
₹106,998
Check details
Apple iPhone 15 Plus
  • Black
  • 6 GB RAM
  • 128 GB Storage
₹87,900
Check details
21% OFF
Acer Swift Go SFG14 41 NX KG3SI 002 Laptop
  • Pure Silver
  • 8 GB RAM
  • 512 GB SSD
₹58,990₹74,999
Buy now
39% OFF
Acer Aspire 5 A515 57G Laptop
  • Gray
  • 16 GB RAM
  • 512 GB SSD
₹54,949₹89,999
Buy now
22% OFF
Acer Aspire 3 A315 24 NX KDESI 004 Laptop
  • Silver
  • 8 GB RAM
  • 512 GB SSD
₹33,499₹42,999
Buy now
39% OFF
Asus VivoBook 15 X515JA BQ322WS Laptop
  • Transparent Silver
  • 8 GB RAM
  • 512 GB SSD
₹31,490₹51,990
Buy now
34% OFF
Xiaomi Pad 6
  • Mist Blue
  • 6 GB RAM
  • 128 GB Storage
₹26,299₹39,999
Buy now
55% OFF
Lenovo Tab M10 5G
  • Abyss Blue
  • 6 GB RAM
  • 128 GB Storage
₹20,999₹47,000
Buy now
32% OFF
Realme Pad 2
  • Imagination Grey
  • 6 GB RAM
  • 128 GB Storage
₹19,790₹28,999
Buy now
Honor Pad X9
  • Gray
  • 4 GB RAM
  • 128 GB Storage
₹14,999
Check details

According to a latest Symantec report, more than 4,800 unique websites face formjacking attack every month. It also pointed out that there has been a rapid increase in number of such attacks in last one year. Hackers have also started selling card details and personal data on dark web.

Also read: Looking for a smartphone? To check mobile finder click here.

"By conservative estimates, cyber criminals may have collected tens of millions of dollars last year, stealing consumers' financial and personal information through credit card fraud and sales on the dark web, with a single credit card fetching up to $45 in the underground selling forums," according to the report.

"Formjacking represents a serious threat for both businesses and consumers," said Greg Clark, CEO, Symantec.

Here's how formjacking works (Norton)
Here's how formjacking works (Norton)

"Consumers have no way to know if they are visiting an infected online retailer without using a comprehensive security solution, leaving their valuable personal and financial information vulnerable to potentially devastating identity theft. For enterprises, the skyrocketing increase in formjacking reflects the growing risk of supply chain attacks, not to mention the reputational and liability risks businesses face when compromised," he added.

ALSO READ: Large Indian firms lose about $10 million to cyber attacks each year

Some of the recent formjacking incidents involve British Airways, one of the biggest airline services in the world. In September last year, BA said credit card details of its hundreds of thousands of customers were stolen in a cyber attack on its website and mobile app. The airline disclosed over 380,000 card payments were stolen with hackers accessing critical data such as card number, email IDs, and expiry dates.

TicketMaster, a US-based ticket sales and distribution company, suffered a massive cyber attack in July last year affecting about 40,000 customers. Hackers used the formjacking method to attack the platform as part of widespread credit card skimming operation.

ALSO READ: 15,779 Indian websites hacked during January-November 2018, says IT ministry

Follow HT Tech for the latest tech news and reviews , also keep up with us on ,Twitter, Facebook, , and Instagram. For our latest videos, subscribe to our YouTube channel.

First Published Date: 21 Feb, 18:49 IST
Tags:

Sale

Mobiles Tablets Laptops
10% OFF
Apple iPhone 15 Plus
  • Black
  • 6 GB RAM
  • 128 GB Storage
₹80,990₹89,900
Buy now
37% OFF
Samsung Galaxy S23 Plus 5G
  • Phantom Black
  • 8 GB RAM
  • 256 GB Storage
₹95,000₹149,999
Buy now
3% OFF
Samsung Galaxy Z Fold5
  • Icy Blue
  • 12 GB RAM
  • 256 GB Storage
₹154,999₹159,999
Buy now
5% OFF
Apple iPhone 13 Pro Max
  • Gold
  • 6 GB RAM
  • 128 GB Storage
₹127,990₹134,900
Buy now
38% OFF
Xiaomi Pad 6
  • Mist Blue
  • 6 GB RAM
  • 128 GB Storage
₹24,999₹39,999
Buy now
55% OFF
Lenovo Tab M10 5G
  • Abyss Blue
  • 6 GB RAM
  • 128 GB Storage
₹20,999₹47,000
Buy now
22% OFF
Realme Pad 2
  • Imagination Grey
  • 6 GB RAM
  • 128 GB Storage
₹19,599₹24,990
Buy now
47% OFF
Lenovo Tab M9
  • Frost Blue
  • 3 GB RAM
  • 32 GB Storage
₹8,999₹17,000
Buy now
22% OFF
Acer Aspire 3 A315 24 NX KDESI 004 Laptop
  • Silver
  • 8 GB RAM
  • 512 GB SSD
₹33,499₹42,999
Buy now
21% OFF
Acer Swift Go SFG14 41 NX KG3SI 002 Laptop
  • Pure Silver
  • 8 GB RAM
  • 512 GB SSD
₹58,990₹74,999
Buy now
33% OFF
Acer Aspire 5 A515 57G Laptop
  • Gray
  • 16 GB RAM
  • 512 GB SSD
₹51,480₹76,800
Buy now
21% OFF
Asus VivoBook 15 X515JA BQ322WS Laptop
  • Transparent Silver
  • 8 GB RAM
  • 512 GB SSD
₹30,990₹38,990
Buy now