Web · Incident Response · Incident Response
Magecart skimmer planted in an e-commerce Magento checkout · 14 days ago
A Magento store with 8M TL monthly revenue. A customer complained 'my card details have been leaked.' A 12-line JavaScript skimmer was added to checkout.js, card data flows to a C2 in Latvia. 14 days × 60 orders per day = 840 cards leaked. You will make 11 critical decisions in sequence.
Before you start the scenario
- You are the decision-maker in this incident · every choice leaves time/cost/reputation behind
- There are no wrong answers · just like in real life · but some paths are more expensive
- You can restart it anytime · try different paths
- At the end, a 3-axis score + alternative routes are shown