Video Player Spreads Skimmers

Research from PaloAlto Unti42 identified over 100 real estate sites compromised to distribute skimmers collecting user information. The affected real estate sites all belonged to one parent company - Sotheby’s with their Brightcove account having been compromised. The compromised sites all imported the same malicious video from the cloud video platform, which in essence brought about a supply chain network attack. The issue associated with the Sotheby and Brightcove has been resolved prior to Unit42 sharing their analysis and findings.