Full protection for online stores

Online store falls victim to a targeted denial-of-service attack by unfair competitors, blackmailers or contract hackers. DDoS attacks usually occur in waves at the beginning, temporarily leading to noticeable performance optimization losses or interruptions and even downtimes of the online offering. The attack is then usually increased in frequency up to permanent interruption for several hours or days.

• The e-commerce site is offline for up to several days, orders are not possible or involve cancellations on repeated attempts until sales stop or customers migrate to alternative retailers.
• Operator of the online store suffers high financial losses.
• The affected online store loses the trust of customers due to the uncontrolled and recurring disruptions, which are usually exploited by attackers aggravating in combination with security deficiencies.
• Running advertising campaigns go nowhere and new customers as well as recurring customers are lost.
• Not only complete failures but also performance optimization losses affect the buying behavior of the already acquired visitors with buying interest and lead directly to purchase from the competitor.

Payment data or addresses of the online store customer base end up in the hands of third parties, are published, resold on the darknet, misused for phishing attacks or offered for repurchase by blackmailers. The most common reasons for data leaks from online stores are configuration errors, cloud and server vulnerabilities, and targeted hacker attacks.

• The customers of the online store suffer irreversible damage as a result, for which the online store can be sued individually or multiple times for damages.
• In addition to legal consequences and liability, the affected online store loses the trust of customers due to security deficiencies.
• Customer confidence due to security flaws.
• Duty to report to data protection authorities and publish the incident.
• Affected online stores must be taken offline for several days and sales are at a standstill until the root cause determination and the elimination of the data leak are completed.
• The process of ex-post analysis is further complicated with inadequate monitoring solution and logging in case of hacker attacks as intruders make high efforts to cover their own tracks and place backdoors for future attacks.
• In the event of damage come in addition to penalties for data protection violations, claims for damages still high expenses for forensics and testing for backdoors and rootkits required before the online store may be put back into operation.
.

Increasingly, online stores are being attacked at payment processing interfaces. Intruders can redirect customers to phishing sites when paying with Paypal/Klarna/immediate gateways or request payment to different accounts in your name.

• This causes irreversible damage to the customers of the online store, for which the online store can be sued individually or multiple times for damages.
• In addition to legal consequences and liability, the affected online store loses the trust of customers due to security deficiencies.
• Customer confidence due to security flaws.
• Duty to report to data protection authorities and publish the incident.
• Affected online stores must be taken offline for several days and sales are at a standstill until the root cause determination and the elimination of the data leak are completed.
• The process of ex-post analysis is further complicated with inadequate monitoring solution and logging in case of hacker attacks as intruders make high efforts to cover their own tracks and place backdoors for future attacks.
• In the event of damage come in addition to penalties for data protection violations, claims for damages still high expenses for forensics and testing for backdoors and rootkits required before the online store may be put back into operation.
.

Customer places his order and pays for the item while the attacker overwrites the shipping address unnoticed by manipulating the shipping processing interface in the online store. Despite shipping, the goods do not reach the customer.

• Anger with customers and loss of confidence due to cybercrime theft unauthorized redirection of the goods.
.
• In addition to legal consequences and liability, the affected online store loses the trust of customers due to security flaws.
.
• Affected online stores must be taken offline for several days and sales are at a standstill until the root cause determination and the elimination of the data leak are completed.
• The process of ex-post analysis is further complicated with inadequate monitoring solution and logging during hacker attacks as intruders make high efforts to cover their own tracks and place backdoors for future attacks.

Particularly in the case of B2C offers with high-value items, targeted attacks on product price data are worthwhile for hackers, whereby orders at incorrect prices usually go undetected. In addition, fraud through vouchers and coupons is popular with attackers and low-risk.
Security Solution for online store software: security for

• Magento
• WooCommerce
• Shopware
• Oxid
• Zencart
• OsCommerce

Since recent incidents on the online shop system Volusion and the continuation at Shopify, e-commerce operators are sensitized. Malware infects and spreads preferably via online stores due to the fast spreading thanks to the high trust of customers. Unfortunately, this very thing leads to the loss of trust for the online store.