The norforge report sounds like they were targeting magento (e-commerce) sites to steal some $. Darn, was hoping they were trying to swipe DRM keys or something.
Magento is ridiculously complex, open-source, and often self-maintained. It's probably fairly easy to exploit, especially for outdated deployments. And (vs. Wordpress) has payment info to intercept.
8 comments
[ 3.8 ms ] story [ 23.7 ms ] threadhttps://www.reuters.com/legal/government/how-one-hacker-used... (https://news.ycombinator.com/item?id=50152072)
https://norforge.com/blog/inside_cairn (https://news.ycombinator.com/item?id=50152302)
One of those companies that clearly deserved it.