Standard Classification: Stop the looters: method to detect digital skimming a...
summary
Claims a concrete detection method: compute one-way SHA-256 checksums of inline and referenced JavaScript, store baseline hashes, and alert when a script’s hash changes. Implements a simple open-source tool suricata-js (Python) that crawls pages, hashes scripts, and posts alerts (demo shows it flags an injected skimmer). Cites real-world scale — British Airways ~380,000 cards and a £183M fine (later reduced) — and notes a successful catch of a 22-line skimmer payload in the demo.
AI-written summary · about
chapters (7)
- 0:00Start
- 1:58Scheming Attacks
- 3:37What Are Digital Scheming Attacks
- 9:22Case Selection
- 14:16Summary
- 16:47Content Security
- 23:46Demo
related talks
52mBreaking Fraud and Bot Detection Solutions
33mWhere's my dough?! A look at web skimming attacks on
22mFear the Reaper: Characterization and Fast Detection of Card Skimmers
52mFlying Under the Radar - New Security Evasion Techniques
43mBypassing Malware Detection Mechanisms in Online Banking
34mMagecart 2020 The New Face of XSS
30mTargeted Web Skimming on E-Commerce Sites
48mDawn Of The Dead: The Tale Of The Resurrected Domains