Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Hackers Inject Malicious JavaScript Into Okendo Reviews Widget to Target E-Commerce Sites
Malware Families
Excerpt
A significant supply chain attack targeting the Okendo Reviews widget. Threat actors known as SmartApeSG successfully injected malicious JavaScript into this popular e-commerce plugin, potentially exposing millions of online shoppers to malware. Because more than 18,000 brands use this widget on highly visible storefronts and product pages, the compromise created a massive downstream risk. Okendo has since acknowledged the breach and restored the widget to a clean state.…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://api.wigetticks.com/logout/private-response.php?8D1V4th3</code></td><td>The | High | Score 58/100 | First seen |
| URL | http://cdn-static.okendo.io/reviews-widget-plus/js/okendo-reviews.js | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…