---
title: Another 'Well Disguised Attack' by Group That Hit Ticketmaster, British Airways
description: Magecart cyber attacks. Magecart skimming operation against a new company. Newegg.com latest car skimming victim.
---

[SecureWorld News ](https://www.secureworld.io/industry-news)

# [Another 'Well Disguised Attack' by Group That Hit Ticketmaster, British Airways](https://www.secureworld.io/industry-news/new-egg-british-airways-hack)

 Written by [SecureWorld News Team](https://www.secureworld.io/industry-news/author/secureworld-news-team) | Wed | Sep 19, 2018 | 7:30 PM Z

Newegg sells all kinds of the *newest* *tech* gadgets.

Now it appears the company is the *newest victim* *of Magecart, *the cybercrime group that is now linked to [British Airways and Ticketmaster hacks](https://www.secureworld.io/industry-news/british-airways-ticketmaster-hack).

Security researchers at Risk IQ detailed the attack, which included a spoofed web domain:

"On August 13th Magecart operators registered a domain called [neweggstats.com](https://community.riskiq.com/search/neweggstats.com) with the intent of blending in with Newegg’s primary domain, newegg.com.  Registered through Namecheap, the malicious domain initially pointed to a standard parking host. However, the actors changed it to [217.23.4.11](https://community.riskiq.com/search/217.23.4.11) a day later, a Magecart drop server where their skimmer backend runs to receive skimmed credit card information. Similar to the British Airways attack, these actors acquired a certificate issued for the domain by Comodo to lend an air of legitimacy to their page"

Researchers say hackers placed a digital skimmer into Newegg's checkout process and that criminals had access to an entire month of skimmed sales before the breach came to light.

Read the complete [Newegg hacking report](https://www.riskiq.com/blog/labs/magecart-newegg/) for more on what happened next and how the Magecart attack was detected.

[View full post](https://www.secureworld.io/industry-news/new-egg-british-airways-hack)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "SecureWorld News Team"
  },
  "dateModified" : "2018-09-19T19:45:05.095Z",
  "datePublished" : "2018-09-19T19:30:05Z",
  "headline" : "Another 'Well Disguised Attack' by Group That Hit Ticketmaster, British Airways",
  "image" : {
    "@type" : "ImageObject",
    "height" : 176,
    "url" : "https://cdn2.hubspot.net/hubfs/2221756/Social%20Media%20images/Chip-Based_Credit_Cards_-_Labeled_for_Reuse_0.jpg",
    "width" : 250
  },
  "mainEntityOfPage" : "https://www.secureworld.io/industry-news/new-egg-british-airways-hack",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/2221756/Logos/SWE/SWE_logo_full-long_forWHITEbackgrounds.jpg",
      "width" : 304.46954
    },
    "name" : "SecureWorld News"
  }
}
```