Malware Campaign Infects 953 Online Stores

# Malware Campaign Infects 953 Online Stores

https://gcdradar.vercel.app/incidents/malware-campaign-infects-953-online-stores · AIR-2026-1536 · closed 2026-11-09

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed large-scale compromise of nearly a thousand online stores.
- Fix status: No fix needed
- First reported: 2026-10-26
- AI role: No AI role
- Products: Online store platforms

## Summary

A long-standing malware campaign compromised 953 online stores by injecting small loader scripts. The injected code serves malicious payloads to site visitors or conceals its presence to avoid detection.

## What to do

Audit online store codebases for unauthorized loader scripts and remove injected payloads.

## Latest updates

- 2026-10-26: 953 Online Stores Infected in Long-Lasting Malware Campaign (https://securityweek.com/953-online-stores-infected-in-long-lasting-malware-campaign)

## Sources

- 2026-10-26 SecurityWeek: 953 Online Stores Infected in Long-Lasting Malware Campaign https://securityweek.com/953-online-stores-infected-in-long-lasting-malware-campaign
- 2026-10-26 The Hacker News: Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento https://thehackernews.com/2026/10/hackers-infect-953-online-stores-with.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.