Latest news with #onlinepayments
Yahoo
5 days ago
- Yahoo
Hackers are sneaking malware into your browser using Google's link, and antivirus software can't stop it
When you buy through links on our articles, Future and its syndication partners may earn a commission. Attackers use real Google URLs to sneak malware past antivirus and into your browser undetected This malware only activates during checkout, making it a silent threat to online payments The script opens a WebSocket connection for live control, completely invisible to the average user A new browser-based malware campaign has surfaced, demonstrating how attackers are now exploiting trusted domains like to bypass traditional antivirus defenses. A report from security researchers at c/side, this method is subtle, conditionally triggered, and difficult for both users and conventional security software to detect. It appears to originate from a legitimate OAuth-related URL, but covertly executes a malicious payload with full access to the user's browser session. The attack begins with a script embedded in a compromised Magento-based ecommerce site which references a seemingly harmless Google OAuth logout URL: However, this URL includes a manipulated callback parameter, which decodes and runs an obfuscated JavaScript payload using eval(atob(...)). The use of Google's domain is central to the deception - because the script loads from a trusted source, most content security policies (CSPs) and DNS filters allow it through without question. This script only activates under specific conditions. If the browser appears automated or the URL includes the word 'checkout,' it silently opens a WebSocket connection to a malicious server. This means it can tailor malicious behavior to user actions. Any payload sent through this channel is base64-encoded, decoded, and executed dynamically using JavaScript's Function constructor. The attacker can remotely run code in the browser in real time with this setup. One of the primary factors influencing this attack's efficacy is its ability to evade many of the best antivirus programs currently on the market. The script's logic is heavily obfuscated and only activates under certain conditions, making it unlikely to be detected by even the best Android antivirus apps and static malware scanners. They will not inspect, flag, or block JavaScript payloads delivered through seemingly legitimate OAuth flows. DNS-based filters or firewall rules also offer limited protection, since the initial request is to Google's legitimate domain. In the enterprise environment, even some of the best endpoint protection tools may struggle to detect this activity if they rely heavily on domain reputation or fail to inspect dynamic script execution within browsers. While advanced users and cybersecurity teams may use content inspection proxies or behavioral analysis tools to identify anomalies like these, average users are still vulnerable. Limiting third-party scripts, separating browser sessions used for financial transactions, and remaining vigilant about unexpected site behaviors could all help reduce risk in the short term. These are the best VPNs with antivirus you can use right now Take a look at our pick of the best internet security suites HP unveils the future of super-HD video meetings, but it comes at a huge price
Yahoo
7 days ago
- Business
- Yahoo
Visa (NYSE:V) Expands Payment Security With Worldpay and Launches Innovative Tap to Pay Gift Card
Visa recently announced a partnership with Worldpay to enhance online transaction security through 3D Secure, and Blackhawk Network launched a secure Tap to Pay Visa Gift Card, bolstering Visa's innovation in secure payment solutions. These developments may have augmented investor confidence, evidenced by Visa's 11% share price increase last quarter, potentially bolstered by favorable market conditions and broader U.S. index gains. Additionally, Visa's financial performance, including increased sales and a $30 billion share buyback program, contributed to this positive sentiment, aligning with a general market uptrend reflecting benign inflation and progress in China-US trade talks. Buy, Hold or Sell Visa? View our complete analysis and fair value estimate and you decide. AI is about to change healthcare. These 22 stocks are working on everything from early diagnostics to drug discovery. The best part - they are all under $10b in market cap - there's still time to get in early. Visa's recent partnership with Worldpay and the launch of the Tap to Pay Visa Gift Card reflects its ongoing efforts to bolster online transaction security and foster innovation in payment solutions. These initiatives could positively influence Visa's long-term growth narrative by enhancing user engagement, expanding transaction volumes, and ultimately supporting revenue growth. Additionally, Visa's focus on security measures could further entrench its market position, crucial for its strategic geographical expansions. Over the last five years, Visa's total return, including share price and dividends, achieved a substantial 99.15% increase, showcasing strong performance. Comparatively, over the past year, Visa's return outpaced the US Diversified Financial industry, recording gains above the industry's 23.3% return. This indicates robust market positioning and a favorable reception among investors. Visa's current and forecasted financial performance reveals a promising trajectory, with revenue and earnings anticipated to grow as the company capitalizes on stablecoin innovations and value-added services. However, the analyst consensus price target of US$374.25 suggests only a modest increase from the current share price of US$347.7, indicating that Visa's market valuation aligns closely with analysts' expectations of future performance. Consequently, investors should consider both the potential for future growth and existing valuation when assessing Visa's investment prospects. Evaluate Visa's prospects by accessing our earnings growth report. This article by Simply Wall St is general in nature. We provide commentary based on historical data and analyst forecasts only using an unbiased methodology and our articles are not intended to be financial advice. It does not constitute a recommendation to buy or sell any stock, and does not take account of your objectives, or your financial situation. We aim to bring you long-term focused analysis driven by fundamental data. Note that our analysis may not factor in the latest price-sensitive company announcements or qualitative material. Simply Wall St has no position in any stocks mentioned. Companies discussed in this article include NYSE:V. This article was originally published by Simply Wall St. Have feedback on this article? Concerned about the content? with us directly. Alternatively, email editorial-team@
Yahoo
13-06-2025
- Business
- Yahoo
Online Shoppers Warned About New Payment Method
Online shoppers have been increasingly provided the option to pay directly from their bank accounts instead of having to put in all of their credit or debit card information. While this might be convenient for some shoppers and offer some perks, it also carries some significant risks. These new "pay by bank" options have some perks for customers, allowing refunds to be processed instantly and allowing the transacrion to proceed without card details being shared. It also has some perks for businesses, allowing them to bypass card transaction fees and receive customer funds immediately. While this might be alluring to consumers and businesses alike, there are some security concerns. While the "pay by bank" options are increasingly common, Which? money editor Jenny Ross issued a pretty major warning for consumers, pointing out that these sort of payments lacks the Section 75 and chargeback protections associated with other payment methods. Section 75 of the Consumer Credit Act can hold credit card companies liable for faulty or unfulfilled purchases. This allows shoppers to potentially file chargebacks with their credit card provider and receive refunds even if the retailer fails to reimburse them. These same protections don't exist for "pay by bank" options. 'Innovations like pay by bank present opportunities for businesses and consumers alike, but they're not without risk, particularly as they lack the rigorous purchase protections you get when paying by card," Ross said via The Independent. 'We're calling on the regulator to act to ensure consumers can use pay by bank with confidence, but in the meantime, we'd urge consumers to think carefully before using it to book events or make substantial purchases – for now, your good old-fashioned credit or debit card may be the best option.' Obviously, this is an important thing for customers to consider before using the "pay by bank" option for their online shopping. Online Shoppers Warned About New Payment Method first appeared on Men's Journal on Jun 13, 2025
The Guardian
05-06-2025
- Business
- The Guardian
Stock exchange dealt another blow as £12bn fintech ditches main London listing
The online payments company Wise has said it will move its main share listing to the US, in the latest blow to London's beleaguered stock market. Wise, which is one of the biggest financial technology businesses in the country and has been listed in London since 2021, said on Thursday that it now intends to dual list its shares in the US and the UK in an attempt to attract more investors and boost its value. The company's chief executive, Kristo Käärmann, said moving its main listing would help 'drive greater awareness of Wise in the US, the biggest market opportunity in the world for our products today, and enabling better access to the world's deepest and most liquid capital market. 'A dual listing would also enable us to continue serving our UK-based owners effectively, as part of our ongoing commitment to the UK. The UK is home to some of the best talent in the world in financial services and technology, and we will continue to invest in our presence here to fuel our UK and global growth,' he said. It represents yet another setback for London's stock market, as a string of high-profile companies have defected to New York in search of better liquidity, higher valuations and access to bigger investors. Last year the construction equipment rental company Ashtead announced it would move its primary listing to the US, following companies such as the gambling group Flutter Entertainment and the building materials provider CRH. Earlier this week the drugmaker Indivior said it planned to cancel the secondary listing it had retained in London after switching its main stock listing to the US last year. Also this week the metal investment company Cobalt Holdings scrapped its move to list in London, which was expected to have raised about $230m. Wise, formerly known as TransferWise, joined the stock market in 2021 at a valuation of £8.75bn, making it the biggest ever listing of a UK tech company. The shares rose 10% on Thursday morning to value the company at more than £12bn Its decision to pivot to the US also marks another setback for London as a venue for tech businesses. In 2023 the chip designer Arm Holdings, which is headquartered in Cambridge, also decided to go public in New York rather than London. Wise will call a shareholder meeting for investors to vote on the proposal in the coming weeks. It argued that moving its primary listing could provide a possible pathway to inclusion in major US share indices, which could improve liquidity and demand for Wise shares. Matt Britzman, an equity analyst at the broker Hargreaves Lansdown, noted the decision to move the primary listing away from London created an obstacle for the company to join the FTSE 100, Britain's blue-chip share index. Sign up to Business Today Get set for the working day – we'll point you to all the business news and analysis you need every morning after newsletter promotion 'Keeping a presence in London makes sense, but it does little to sugarcoat the fact that yet another London-listed tech firm is looking across the Atlantic for better valuations – a story that's becoming all too familiar,' he said. A fifth of Wise employees are based in the UK and the company has said it plans to continue hiring and investing in the country. Wise was founded by Käärmann and Taavet Hinrikus in 2011, and has since grown rapidly as it has taken market share from big banks by offering a cheaper money transfer service to individuals and small businesses. Alongside the announcement, the company also reported a 15% rise in revenue for its 2025 financial year to £1.2bn, with profit before tax up 17% to £564.8m.
