Video Player Spreads Skimmers

Industry: Real Estate | Level: Strategic | Source: PaloAltoUnit42 & TheRecord

Research from PaloAlto Unti42 identified over 100 real estate sites compromised to distribute skimmers collecting user information. The affected real estate sites all belonged to one parent company - Sotheby’s with their Brightcove account having been compromised. The compromised sites all imported the same malicious video from the cloud video platform, which in essence brought about a supply chain network attack. The issue associated with the Sotheby and Brightcove has been resolved prior to Unit42 sharing their analysis and findings.