Full protection for online stores

Payment data or addresses of the online store customer base end up in the hands of third parties, are published, resold on the darknet, misused for phishing attacks or offered for repurchase by blackmailers. The most common reasons for data leaks from online stores are configuration errors, cloud and server vulnerabilities, and targeted hacker attacks.

• The customers of the online store suffer irreversible damage as a result, for which the online store can be sued individually or multiple times for damages.
• In addition to legal consequences and liability, the affected online store loses the trust of customers due to security deficiencies.
• Customer confidence due to security flaws.
• Duty to report to data protection authorities and publish the incident.
• Affected online stores must be taken offline for several days and sales are at a standstill until the root cause determination and the elimination of the data leak are completed.
• The process of ex-post analysis is further complicated with inadequate monitoring solution and logging in case of hacker attacks as intruders make high efforts to cover their own tracks and place backdoors for future attacks.
• In the event of damage come in addition to penalties for data protection violations, claims for damages still high expenses for forensics and testing for backdoors and rootkits required before the online store may be put back into operation.
.

Increasingly, online stores are being attacked at payment processing interfaces. Intruders can redirect customers to phishing sites when paying with Paypal/Klarna/immediate gateways or request payment to different accounts in your name.

• This causes irreversible damage to the customers of the online store, for which the online store can be sued individually or multiple times for damages.
• In addition to legal consequences and liability, the affected online store loses the trust of customers due to security deficiencies.
• Customer confidence due to security flaws.
• Duty to report to data protection authorities and publish the incident.
• Affected online stores must be taken offline for several days and sales are at a standstill until the root cause determination and the elimination of the data leak are completed.
• The process of ex-post analysis is further complicated with inadequate monitoring solution and logging in case of hacker attacks as intruders make high efforts to cover their own tracks and place backdoors for future attacks.
• In the event of damage come in addition to penalties for data protection violations, claims for damages still high expenses for forensics and testing for backdoors and rootkits required before the online store may be put back into operation.
.

Customer places his order and pays for the item while the attacker overwrites the shipping address unnoticed by manipulating the shipping processing interface in the online store. Despite shipping, the goods do not reach the customer.

• Anger with customers and loss of confidence due to cybercrime theft unauthorized redirection of the goods.
.
• In addition to legal consequences and liability, the affected online store loses the trust of customers due to security flaws.
.
• Affected online stores must be taken offline for several days and sales are at a standstill until the root cause determination and the elimination of the data leak are completed.
• The process of ex-post analysis is further complicated with inadequate monitoring solution and logging during hacker attacks as intruders make high efforts to cover their own tracks and place backdoors for future attacks.

Particularly in the case of B2C offers with high-value items, targeted attacks on product price data are worthwhile for hackers, whereby orders at incorrect prices usually go undetected. In addition, fraud through vouchers and coupons is popular with attackers and low-risk.
Security Solution for online store software: security for

• Magento
• WooCommerce
• Shopware
• Oxid
• Zencart
• OsCommerce

Since recent incidents on the online shop system Volusion and the continuation at Shopify, e-commerce operators are sensitized. Malware infects and spreads preferably via online stores due to the fast spreading thanks to the high trust of customers. Unfortunately, this very thing leads to the loss of trust for the online store.