<ul><li>Supply chain attack via 21 backdoored Magento extensions affected 500–1,000 e-stores, including a $40B multinational e-store.</li><li>Researchers at Sansec uncovered a coordinated supply chain attack where a backdoor was hidden in 21 applications, lingering undiscovered for 6 years.</li><li>The malicious code injection was recently discovered after threat actors compromised e-commerce servers through the backdoored extensions.</li><li>Impacted vendors include Tigren, Magesolution (MGS), and Meetanshi, with varied responses received when contacted by Sansec.</li></ul>

Sansec uncovered a supply chain attack via 21 backdoored Magento extensions

Discover more