953 Online Stores Infected by Malware

Cybersecurity firm Sansec reports a threat actor infected 953 online stores, mostly running Magento, with loader code since July 2025. The campaign uses five domains, including deepveindrilling.com found on 83 stores in October 2026. Previous versions affected 52,000 visitors via additionalver.com. Sansec notes patched stores can still get infected if they have rogue admin accounts or backdoors.