Credit Card Malware Found Within Social Media Buttons

Advertiser Disclosure

Multiple reports highlight a growing trend in the world of credit card and identity theft. Cybersecurity experts warn consumers to be vigilant for a form of cutting-edge “skimming” via credit card malware in website social media buttons. Here is what you need to know:

Magecart Credit Card Malware Script Targets Social Media Icons

Web skimmer groups are becoming more creative with ways to steal the credit card details and personal information of everyday consumers. A new approach involves adding malware to images within social media sharing buttons on online stores.

“Online payment thieves developed a new method to hide payment skimmers in perfectly legitimate social media icons,” Joost Spanjerberg, a SanSec malware researcher, told Fox News in an email.

According to ZDNet, this malware is known as a Magecart script, or a skimmer. Dutch cybersecurity experts, SanSec, first spotted it in September. The technical aspect of this Magecart script is known as Steganography. This process involves hiding the malicious script within another format, thereby making it harder to detect.

An Uncommon Approach for Scammers

The good news? This skimmer, the Magecart script, does not appear often, according to cybersecurity experts. The most common malware takes the form of scripts hidden in JPG or PNG image files. However, this new skimmer hides within SVG files – commonly used for social media icons.

“Scanners Can No Longer Find Malware”

“While skimmers have added their malicious payload to benign files like images in the past, this is the first time that malicious code has been constructed as a perfectly valid image. The result is that security scanners can no longer find malware just by testing for valid syntax,” SanSec told ZDNet.

Protect Yourself from Credit Card Fraud

A large number of Americans will likely fall victim to credit card fraud every year. While data breaches hold as the most common method to steal credit card information, skimmers and other malware continue to pose a significant risk. For advice on how to protect yourself from credit card fraud, check out our comprehensive article, Ten Ways to Stay Protected Against Credit Card Fraud.

Related Article: Coronavirus Causes Increased Credit Card Skimmer Risks

Featured photo by Tumisu / PixaBay

Editorial Disclosure – The opinions expressed on's reviews, articles, and all other content on or relating to the website are solely those of the content’s author(s). These opinions do not reflect those of any card issuer or financial institution, and editorial content on our site has not been reviewed or approved by these entities unless noted otherwise. Further, lists credit card offers that are frequently updated with information believed to be accurate to the best of our team's knowledge. However, please review the information provided directly by the credit card issuer or related financial institution for full details.

About: Cory Santos
Cory Santos

Cory is the senior credit card editor at BestCards, specializing in everything credit card-related. He’s worked extensively with credit cards and other personal finance topics, including nearly five years at BestCards. Cory’s extensive knowledge is an essential part of the BestCards experience, helping readers to live their best financial lives with up-to-date insights and comprehensive coverage of all facets of the credit card space, including market trends, rewards guides, credit advice, and comprehensive credit card reviews.

Advertiser Disclosure

BestCards is an independent, Florida-based credit card comparison platform. Many of the card offers that appear on this site are from companies from which BestCards receives compensation. This compensation may impact how and where products appear on this site (including, for example, the order in which they appear). BestCards does not include all card companies or all card offers available in the marketplace.