Blog

Ecommerce Platform X-Cart Hit By Ransomware Caused Outage

Nov 18, 2020 | Blog

Do you sell goods and services directly from your company’s website? Do you use X-Cart to do it?

If you answered yes to both of those questions, you may have had some issues with your sales platform.

Thankfully, the issues now seem to have been resolved, but according to the software vendor that makes X-Cart, the issue stemmed from a ransomware attack the company recently suffered. It brought down customer stores that were hosted on the company’s platform.

While few details are known at this point, the issue seems to have arisen when attackers exploited a vulnerability in some third-party software that allowed them to gain access to X-Cart’s store hosting system. Jeff Cohen is the VP of Marketing for Seller Labs, which is the company that produced X-Cart.

Cohen had this to say about the matter:

“We have identified what we believed to have been the vulnerability but do not wish to disclose the name until its confirmed by our security firm.”

Reading between the lines of this statement, it appears that the investigation into the matter is still ongoing. However, apparently the attackers encrypted a small number of X-Cart’s servers, which was enough to grind the system to a halt. Of interest, the hackers did not demand a ransom, nor provide any way for Seller Labs to communicate with them, so the company restored their servers from recent backups.

Not all stores were impacted evenly. Some went offline completely, while others simply reported issues with sending email alerts. In any case, Seller Labs moved quickly to restore service and the outage lasted only a few days. Unfortunately, a few days is a very long time, and some of X-Cart’s customers are not happy, nor are they satisfied with the rather limited information the company has provided to this point. This prompted them to band together and serve Seller Labs with a Class Action lawsuit.

Everything seems to be back to normal at this point, but if your company was impacted, it pays to be aware of the pending lawsuit and consider how you might wish to proceed.

FBI Program Tasked with Infrastructure Security Compromised

FBI Program Tasked with Infrastructure Security Compromised

The FBI program tasked with ensuring critical infrastructure security has been compromised by hackers, who now offer access to the program's data on the dark web. The breach was initially disclosed by Brian Krebs of Krebs on Security, who claims that the data was for...

Streamline Your Business with the Latest Smart Home Technology

Streamline Your Business with the Latest Smart Home Technology

Are you a business owner looking to get the most out of your Google smart home devices? If so, you're in luck! Google has enabled its Nest products and Android OS with the initial rollout of the Matter smart home standard. This means that businesses now have the...

Data Breach at Sequoia One Exposes Sensitive Customer Information

Data Breach at Sequoia One Exposes Sensitive Customer Information

What do you do when your most personal information has been compromised? This is likely the question that customers of Sequoia One asked themselves earlier this month as they were informed that the company had been hacked. Sequoia One specializes in the management of...

Cisco Reports Critical IP Phone Vulnerability

Cisco Reports Critical IP Phone Vulnerability

As a business owner, it's important to stay informed about potential vulnerabilities that could impact your organization. Recently, Cisco reported a critical vulnerability, tracked as CVE-2022-20968, affecting its IP Phone 7800 and 8800 Series. This new vulnerability...

Google Chrome Releases Two New Features

Google Chrome Releases Two New Features

Google Chrome is one of the more commonly used web browsers. Over the years, though, Chrome has gained a reputation for utilizing a large portion of a computer's memory. This can be a problem if you're running other resource-intensive tasks and don't want to slow...

Get a Free Consultation

 

Fill out the form below to receive a free consultation and learn how we can make your technology worry-free!

 

Contact Information

  • 39301 Badger Street, Suite 500
    Palm Desert, CA 9221
  • (760) 333-8523
  • info@icn.tech