Some Magento sites appear to not have patched a code execution vulnerability nicknamed the Shoplift Bug Patch. A patch was released in February; other Magento-powered sites have not applied other patches, making them vulnerable. The latest attack against Magento was highlighted by Malwarebytes and Sucuri, two security companies, who noticed attacks on the client and server sides. Magento, owned by eBay, is an attractive target for attackers since it’s used by many companies, including Nike, Olympus and Ghirardelli Chocolate.”]

