Magecart Hackers Now Hide PHP-Based Backdoor in Website Favicons
Magecart groups are distributing malicious PHP web shells disguised as a favicon to maintain remote access to the compromised servers and inject JavaScript skimmers into online shopping platforms.