{"id":117276,"date":"2023-10-25T15:56:30","date_gmt":"2023-10-25T15:56:30","guid":{"rendered":"https:\/\/www.techopedia.com\/?post_type=definition&#038;p=117276"},"modified":"2024-04-19T13:50:38","modified_gmt":"2024-04-19T13:50:38","slug":"formjacking","status":"publish","type":"definition","link":"https:\/\/www.techopedia.com\/definition\/formjacking","title":{"rendered":"Formjacking"},"content":{"rendered":"<h2><span id=\"what_is_formjacking\">What is Formjacking?<\/span><\/h2>\n<p>Formjacking is the <a href=\"https:\/\/www.techopedia.com\/definition\/4356\/software\">software<\/a> equivalent of credit card skimming. It is a portmanteau combining \u201cform\u201d with part of \u201chi-jacking.\u201d It steals credit card details from <a href=\"https:\/\/www.techopedia.com\/definition\/25561\/web-form\">online forms<\/a>, usually on <a href=\"https:\/\/www.techopedia.com\/definition\/ecommerce\">e-commerce<\/a> sites. Affected <a href=\"https:\/\/www.techopedia.com\/definition\/5411\/website\">websites<\/a> still operate as normal, making it difficult to detect. What is formjacking? It is the invisible thief.<\/p>\n<p>Credit <a href=\"https:\/\/www.techopedia.com\/definition\/25435\/card-skimming\">card skimming<\/a> is the theft of credit card details from physical machines such as ATMs. The <a href=\"https:\/\/www.techopedia.com\/definition\/threat-actor\">threat actors<\/a> introduce a piece of physical <a href=\"https:\/\/www.techopedia.com\/definition\/2210\/hardware-hw\">hardware<\/a> either inside the ATM or over an external element of it.<\/p>\n<p>The illegal <a href=\"https:\/\/www.techopedia.com\/definition\/2185\/device\">device<\/a> takes a copy of the <a href=\"https:\/\/www.techopedia.com\/definition\/807\/data\">data<\/a> from the strip on each card used in the ATM. This includes:<\/p>\n<ul>\n<li>The credit card number<\/li>\n<li>The expiration date<\/li>\n<li>The cardholder\u2019s full name<\/li>\n<\/ul>\n<p>It is also common to install a pinhole camera and point it at the keypad. The camera captures the 4-digit <a href=\"https:\/\/www.techopedia.com\/definition\/12128\/personal-identification-number-pin\">Personal Identification Number<\/a> (PIN).<\/p>\n<p>Instead of targeting physical devices, formjacking targets forms on e-commerce websites. From the <a href=\"https:\/\/www.techopedia.com\/definition\/threat-actor\">threat actor\u2019s<\/a> point of view, these forms are a perfect target. They gather <a href=\"https:\/\/www.techopedia.com\/definition\/4046\/personally-identifiable-information-pii\">personal information<\/a> about the user and their credit card details.<\/p>\n<p>This provides <a href=\"https:\/\/www.techopedia.com\/definition\/27435\/cybercriminal\">cyber criminals<\/a> with everything they need to perform <a href=\"https:\/\/www.techopedia.com\/definition\/1426\/card-not-present-cnp\">Cardholder Not Present<\/a> (CNP) credit card fraud. The threat actors seldom abuse the credit card themselves. Instead, they sell all the harvested card details on the <a href=\"https:\/\/www.techopedia.com\/definition\/31562\/dark-web\">Dark Web<\/a>.<\/p>\n<p>Instead of physically inserting a piece of hardware into a device, the threat actors \u201cinject\u201d some <a href=\"https:\/\/www.techopedia.com\/definition\/4015\/malicious-software-malware\">malicious<\/a> <a href=\"https:\/\/www.techopedia.com\/definition\/3929\/javascript-js\">JavaScript code<\/a> into a <a href=\"https:\/\/www.techopedia.com\/definition\/4774\/web-page-page\">web page<\/a>. The malicious code collects the victim\u2019s credit card number and other personal information and sends the bundle of data to the threat actors.<\/p>\n<p>Importantly, the same information is allowed to pass through to the rest of the website. The victim\u2019s transaction is completed as if nothing untoward happened. As far as the merchant and the customer are concerned, everything worked exactly as expected. The order is placed, the goods are shipped, and no suspicions are raised.<\/p>\n<p>With the introduction of <a href=\"https:\/\/www.techopedia.com\/definition\/31009\/contactless-card\">contactless payment cards<\/a>, physical card skimming became much more difficult. Ironically, that increase in security for physical uses of a payment card helped drive the switch to \u2013 and the rapid uptake of \u2013 formjacking.<\/p>\n<p>Formjacking is so prevalent now that there are specialist cybercriminal collectives exclusively targeting e-commerce sites.<\/p>\n<h3>Techopedia Explains the Formjacking Meaning<\/h3>\n<p><img decoding=\"async\" src=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/2-Formjacking-1-300x190.jpg\" alt=\"Techopedia Explains the Formjacking Meaning\" width=\"1200\" height=\"760\" class=\"aligncenter wp-image-224537\" srcset=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/2-Formjacking-1-300x190.jpg 300w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/2-Formjacking-1-1024x649.jpg 1024w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/2-Formjacking-1-768x486.jpg 768w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/2-Formjacking-1-1536x973.jpg 1536w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/2-Formjacking-1-2048x1297.jpg 2048w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/2-Formjacking-1-1200x760.jpg 1200w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/2-Formjacking-1-1980x1254.jpg 1980w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<p>A cyberattack where hackers inject malicious code into online forms on legitimate websites to steal users&#8217; sensitive information.<\/p>\n<p>The formjacking definition is a cyberattack where <a href=\"https:\/\/www.techopedia.com\/definition\/4014\/malicious-code\">malicious JavaScript code<\/a> is injected into the online forms of legitimate websites to steal users&#8217; sensitive information. This can include payment details, personal identification numbers, and other private data. The stolen information is secretly transmitted to the attacker&#8217;s server as users submit their forms.<\/p>\n<p>Unlike other cyber threats like <a href=\"https:\/\/www.techopedia.com\/definition\/4049\/phishing\">phishing<\/a> or <a href=\"https:\/\/www.techopedia.com\/definition\/4337\/ransomware\">ransomware<\/a>, formjacking targets legitimate websites, making them harder to detect. It silently captures data without disrupting user access, allowing continuous and unnoticed data theft, which sets it apart from more immediate threats like <a href=\"https:\/\/www.techopedia.com\/definition\/4157\/virus\">viruses<\/a>.<\/p>\n<p>So what\u2019s the meaning of formjacking? It means you always need to stay on your toes when entering details online.<\/p>\n<h2><span id=\"how_does_formjacking_work\">How Does Formjacking Work?<\/span><\/h2>\n<p><img decoding=\"async\" src=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/3-How-Formjacking-Works-211x300.jpg\" alt=\"How Does Formjacking Work?\" width=\"1200\" height=\"1710\" class=\"aligncenter wp-image-225616\" srcset=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/3-How-Formjacking-Works-211x300.jpg 211w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/3-How-Formjacking-Works-719x1024.jpg 719w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/3-How-Formjacking-Works-768x1094.jpg 768w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/3-How-Formjacking-Works-1078x1536.jpg 1078w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/3-How-Formjacking-Works-1437x2048.jpg 1437w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/3-How-Formjacking-Works-1200x1710.jpg 1200w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/3-How-Formjacking-Works-1980x2822.jpg 1980w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/3-How-Formjacking-Works-scaled.jpg 1796w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<p>Different techniques are used, but they all lead to the same end result: the exfiltration of personal information and credit card details.<\/p>\n<h3>1. Embedding JavaScript Into the Code of a Website<\/h3>\n<p>The first technique is to embed JavaScript into a website&#8217;s code. This changes the page&#8217;s functionality. The added code takes a copy of the <a href=\"https:\/\/www.techopedia.com\/definition\/25260\/sensitive-information\">sensitive data<\/a> and sends it to the threat actors. The code is often <a href=\"https:\/\/www.techopedia.com\/definition\/16375\/obfuscation\">obfuscated<\/a> or <a href=\"https:\/\/www.techopedia.com\/definition\/948\/encoding\">encoded<\/a> so that it can\u2019t be directly read by a human without decoding it.<\/p>\n<p>All e-commerce websites must interact with their payment card transaction processing partner. It might be a bank, a credit card company, or an accredited payment partner that sits between merchants and the credit card companies.<\/p>\n<p>The payment partner will supply some form of <a href=\"https:\/\/www.techopedia.com\/definition\/1560\/payment-gateway\">payment gateway<\/a> <a href=\"https:\/\/www.techopedia.com\/definition\/4356\/software\">software<\/a> that has to be included in the website\u2019s architecture. Any words or variable names in the malicious JavaScript that by necessity are left in plain text are often given names that suggest the code is related to <a href=\"https:\/\/www.techopedia.com\/definition\/1517\/google-analytics\">Google Analytics<\/a>, to the payment gateway software, or to <a href=\"https:\/\/www.techopedia.com\/definition\/7624\/cookie\">cookies<\/a>.<\/p>\n<p>The <a href=\"https:\/\/www.techopedia.com\/definition\/1326\/domain-networking\">domains<\/a> to which the data is sent often use names that can be misread if they are not carefully examined. Slight misspellings and substitutions, such as using an \u201ci\u201d instead of an \u201cl,\u201d can trick the reader into thinking the domain name is safe.<\/p>\n<p>Here are some <strong>real-world examples<\/strong> that have been used in the past:<\/p>\n<ul>\n<li>google-analyitics.org<\/li>\n<li>google-analytics.cm<\/li>\n<li>googietagmanagar.com<\/li>\n<li>googlc-analytics.cm<\/li>\n<li>api-googles.com<\/li>\n<li>tracker-visitors.com<\/li>\n<\/ul>\n<h3>2. Loading a \u201cDownloader\u201d Script Into the Web Page<\/h3>\n<p>Another strategy is to load only a tiny \u201cdownloader\u201d <a href=\"https:\/\/www.techopedia.com\/definition\/10324\/scripts\">script<\/a> into the web page. This small stub of <a href=\"https:\/\/www.techopedia.com\/definition\/589\/code\">code<\/a> has only one job. When activated, it <a href=\"https:\/\/www.techopedia.com\/definition\/394\/download-dl\">downloads<\/a> the actual formjacking script from a <a href=\"https:\/\/www.techopedia.com\/definition\/9937\/virtual-hosting\">remote hosting<\/a> location. Threat actors have even used <a href=\"https:\/\/www.techopedia.com\/definition\/github\">GitHub<\/a> as the remote location for their malign scripts.<\/p>\n<p>This downloading technique has the advantage that the threat actors can change the code in the malign JavaScript once, and all infected websites will automatically use the updated script the next time they download it.<\/p>\n<p>If the JavaScript is coming from a <a href=\"https:\/\/www.techopedia.com\/definition\/2282\/server\">server<\/a> maintained by the threat actors, they can examine the <a href=\"https:\/\/www.techopedia.com\/definition\/1938\/metadata\">meta-data<\/a> in the request. They can check the <a href=\"https:\/\/www.techopedia.com\/definition\/2435\/internet-protocol-address-ip-address\">IP address<\/a>, the user-agent, and the referrer and decide whether to send back a malicious script, a clean script, or even nothing at all.<\/p>\n<p>If they suspect the request has come from a security researcher trying to diagnose the attack, the threat actors will vary the responses sent back. This will prevent basic automation tools from analyzing the malicious script.<\/p>\n<p>There have been cases where a deny list on the threat actor\u2019s server contained IP addresses owned by cybersecurity companies. The download of JavaScript to these IP addresses was blocked.<\/p>\n<h3>3. Redirecting the User to a Deceptive Website<\/h3>\n<p>Another \u2013 albeit little-used \u2013 technique is to <a href=\"https:\/\/www.techopedia.com\/definition\/1708\/url-redirect\">redirect<\/a> the user to a look-alike website hosted on a server under the control of the threat actors and to return them to the real website once the data entry portion of the purchase has been completed.<\/p>\n<p>Whichever method is used, the code is hooked into some user action, such as a button click on the web page.<\/p>\n<p>Code is added to the website that adds to or replaces the genuine code that is activated when:<\/p>\n<ul>\n<li>A form is submitted when the \u201cBuy\u201d, \u201cSubmit\u201d, or similar button is clicked.<\/li>\n<li>The \u201cEnter\u201d key is pressed, which can indicate a form submission.<\/li>\n<li>Mouse button activity is detected.<\/li>\n<li>A page load event is triggered to confirm an order has been placed.<\/li>\n<\/ul>\n<p>Less commonly, the JavaScript can be timer-based. Every half a second or so, it will \u201cscrape\u201d a copy of the data out of the form and harvest it.<\/p>\n<h2><span id=\"what_is_magecart\">What is Magecart?<\/span><\/h2>\n<p><a href=\"https:\/\/www.akamai.com\/glossary\/what-is-magecart\" target=\"_blank\">Magecart<\/a> refers to a coalition of multiple cybercriminal groups that specialize in digital credit card theft by using formjacking techniques. These groups inject malicious JavaScript code into the payment forms of e-commerce websites to siphon credit card data during transactions.<\/p>\n<p>They exploit vulnerabilities across <a href=\"https:\/\/www.techopedia.com\/definition\/web5\">various web platforms<\/a>, including third-party components integrated into multiple e-commerce sites. This method allows them to perform wide-reaching attacks that can simultaneously affect multiple websites, increasing their potential to steal massive amounts of data.<\/p>\n<p>Magecart attacks have successfully breached both major retailers and smaller online stores, showing off their capability to adapt and refine their strategies in response to evolving security measures. This adaptability and their persistent threat to online commerce really show the need for more robust and constant cybersecurity defenses tailored against such specialized forms of hacking.<\/p>\n<h2><span id=\"how_do_websites_become_infected\">How Do Websites Become Infected?<\/span><\/h2>\n<p>Any modern, non-trivial website uses many third-party modules and code to deliver the user the experience and functionality that they have come to expect from professional websites.<\/p>\n<p>Formjackers exploit the same sort of vulnerabilities other cybercriminals look for.<\/p>\n<p class=\"p1\"><div class=\"su-accordion su-u-trim\">\n<p class=\"p1\"><div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Vulnerabilities in Content Management Systems (CMS)<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> Websites are often built on <a href=\"https:\/\/www.techopedia.com\/definition\/24075\/content-management-system-cms\">content management systems<\/a> (CMS). Like all <a href=\"https:\/\/www.techopedia.com\/definition\/4356\/software\">software<\/a>, these can have <a href=\"https:\/\/www.techopedia.com\/definition\/13484\/vulnerability\">vulnerabilities<\/a>. Websites that don\u2019t update to the latest version of the CMS will have vulnerabilities that can be exploited. <\/div><\/div>\n<p class=\"p1\"><div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Risks Associated with Third-Party Codes and Plugins<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> Any third-party code, <a href=\"https:\/\/www.techopedia.com\/definition\/4324\/plug-in\">plug-in<\/a>, or other <a href=\"https:\/\/www.techopedia.com\/definition\/3843\/module\">modules<\/a> might have vulnerabilities in them. It\u2019s important to keep these <a href=\"https:\/\/www.techopedia.com\/definition\/24537\/patch\">patched<\/a> and up to date, along with the <a href=\"https:\/\/www.techopedia.com\/definition\/30145\/server-operating-system-server-os\">webserver operating system<\/a> and the core web pages. <\/div><\/div>\n<p class=\"p1\"><div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>E-commerce Software Vulnerabilities<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> Vulnerabilities have been seen in the e-commerce software itself. These can lead to direct access to the transaction data without having to steal it from the data entered in a form. <\/div><\/div>\n<div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Brute-Force Attacks on Administrative Access<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> Threat actors may try to gain <a href=\"https:\/\/www.techopedia.com\/definition\/4961\/administrative-privileges\">administrative access<\/a> to the web server by <a href=\"https:\/\/www.techopedia.com\/definition\/18091\/brute-force-attack\">brute-forcing<\/a> a <a href=\"https:\/\/www.techopedia.com\/definition\/4042\/password\">password<\/a>. They may try a password obtained from a previous <a href=\"https:\/\/www.techopedia.com\/definition\/13601\/data-breach\">data breach<\/a> in the hope that the administrator has used the same password in more than one system. <\/div><\/div>\n<div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Risks of Malicious Code in Open Source Software<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> <a href=\"https:\/\/www.techopedia.com\/definition\/3294\/open-source\">Open source<\/a> software libraries and tools are being used more commonly than ever before. There have been cases where malicious code has been covertly included in a submission to an open source project that has then been inadvertently included in the released product. <\/div><\/div>\n<div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Advert-Related Web Page Infections<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> Web pages that display adverts have been infected when the threat actors manufactured an advert with a <a href=\"https:\/\/www.techopedia.com\/definition\/5381\/payload\">payload<\/a> containing formjacking code. That advert was submitted to the advertising network, which then unwittingly distributed the tainted advert to thousands and thousands of websites. <\/div><\/div>\n<p class=\"p1\"><\/div>\n<h2><span id=\"how_to_detect_formjacking\">How to Detect Formjacking<\/span><\/h2>\n<p>Formjacking has no visible signs that something is wrong, so the website visitor cannot tell if anything is amiss. The merchant sees purchases coming through at the expected run rate.<\/p>\n<p>If everything seems to be working, the assumption is everything\u2019s OK. What is required is something that can scan and analyze the website to verify everything is OK.<\/p>\n<h3>File Integrity Monitoring<\/h3>\n<p><a href=\"https:\/\/www.techopedia.com\/definition\/30565\/file-integrity-monitoring-fim\">File Integrity Monitoring<\/a> (FIM) is a software tool that scans a target set of <a href=\"https:\/\/www.techopedia.com\/definition\/7199\/file\">files<\/a> and folders and creates a record of their size, modification times, and other characteristics. This is recorded as the <a href=\"https:\/\/www.techopedia.com\/definition\/6148\/baseline\">baseline<\/a>.<\/p>\n<p>If future scans detect any changes to the monitored files, an alert is raised. This works well for static sites, but sites that have <a href=\"https:\/\/www.techopedia.com\/definition\/4874\/dynamic-content-html\">dynamic content<\/a>, such as shopping carts that change as a function of their normal operation, may confuse FIM systems.<\/p>\n<p>The website\u2019s architecture dictates where the dynamic changes take place. If they are purely in a back-end database, FIM will capture changes to web pages. But if some of the web pages are generated in real time, they cannot be baselined, and so an FIM system will not help.<\/p>\n<p>Furthermore, an FIM system cannot detect threats that are embedded in third-party modules because the module will be base-lined with the threat already inside it.<\/p>\n<p>So, for dynamic sites, FIM systems must be supplemented by a communications baseline and connection monitoring. This is effectively a set of allow lists and deny lists that accept or block communications from the website.<\/p>\n<p>Normal web traffic is allowed. Outward connections that aren\u2019t serving up web pages are compared to an allowed list that contains the details of valid outbound connections that will be made by the website \u2013 including the third-party modules.<\/p>\n<p>For example, connections from the payment gateway modules are characterized and listed in the allow list. Only connection attempts to the certified remote IP addresses and <a href=\"https:\/\/www.techopedia.com\/definition\/24717\/network-port\">ports<\/a> in the allow list are permitted.<\/p>\n<p>Once all valid operational connections to and from the website have been identified, characterized, and added to the allowed lists, the exfiltration of data by transmission becomes impossible.<\/p>\n<p>Redirecting web pages is also blocked, and many of the incoming infection routes are blocked off automatically.<\/p>\n<h2><span id=\"other_formjacking_threats\">Other Formjacking Threats<\/span><\/h2>\n<p>Formjacking currently focuses on the theft of payment card data. However, it can, of course, be used to capture any type of data entered into an online form.<\/p>\n<p>This could include <a href=\"https:\/\/www.techopedia.com\/definition\/23639\/online-banking\">online banking<\/a>, healthcare information, and any type of <a href=\"https:\/\/www.techopedia.com\/definition\/10259\/credentials\">login credentials<\/a>. It may also be used to alter the data that is sent through to the genuine website.<\/p>\n<p>For example, in <a href=\"https:\/\/www.techopedia.com\/electronic-voting-systems-controversies-vulnerabilities-and-reforms\">electronic voting systems<\/a>, the formjacking software could amend a certain percentage of the votes to sway the outcome.<\/p>\n<p>Formjacking is a type of <a href=\"https:\/\/www.techopedia.com\/definition\/2387\/cybercrime\">cybercrime<\/a> that has a particularly insidious potential.<\/p>\n<h2><span id=\"how_to_prevent_formjacking\">How to Prevent Formjacking<\/span><\/h2>\n<p>Preventing formjacking involves a combination of proactive security measures and best practices that both <a href=\"https:\/\/www.techopedia.com\/definition\/17095\/developer\">developers<\/a> and website administrators can implement to safeguard their websites.<\/p>\n<p>Here are key recommendations to help <a href=\"https:\/\/www.techopedia.com\/how-to-avoid-social-engineering-attacks-that-prey-on-employee-psychology\">protect against this type of cyberattack<\/a>:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/4-How-to-Prevent-Formjacking-2-177x300.jpg\" alt=\"How to Prevent Formjacking\" width=\"1200\" height=\"2031\" class=\"aligncenter wp-image-225633\" srcset=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/4-How-to-Prevent-Formjacking-2-177x300.jpg 177w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/4-How-to-Prevent-Formjacking-2.jpg 384w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<p class=\"p1\"><div class=\"su-accordion su-u-trim\">\n<p class=\"p1\"><div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Regular Security Audits<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> Conduct thorough and regular audits of your website\u2019s code and third-party services to identify and address vulnerabilities that could be exploited for formjacking. <\/div><\/div>\n<p class=\"p1\"><div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Content Security Policy (CSP)<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> Implement <a href=\"https:\/\/www.techopedia.com\/definition\/4099\/security-policy\">CSP<\/a> headers to restrict the sources from which scripts can be loaded. This helps prevent the execution of unauthorized scripts that could be used for formjacking. <\/div><\/div>\n<p class=\"p1\"><div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Subresource Integrity (SRI)<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> Use <a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Security\/Subresource_Integrity\" target=\"_blank\">SRI<\/a> to ensure that files fetched from third-party servers have not been tampered with. SRI uses cryptographic hashes to verify the integrity of the content received from external sources. <\/div><\/div>\n<p class=\"p1\"><div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Monitor and Update Software<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> <a href=\"https:\/\/www.techopedia.com\/definition\/2137\/firmware\">Keep all software<\/a>, including <a href=\"https:\/\/www.techopedia.com\/definition\/24075\/content-management-system-cms\">CMS platforms<\/a>, plugins, and third-party services, up to date with the latest security patches. Outdated software is a common entry point for attackers. <\/div><\/div>\n<p class=\"p1\"><div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Secure Data Transmission<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> <a href=\"https:\/\/www.techopedia.com\/definition\/5507\/encryption\">Encrypt<\/a> all data transmitted via forms using <a href=\"https:\/\/www.techopedia.com\/definition\/5361\/hypertext-transport-protocol-secure-https\">HTTPS<\/a> to prevent interceptions during transmission. <\/div><\/div>\n<div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Employee Training<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> Educate your development and administrative teams about the risks of formjacking and the importance of following security best practices in their daily operations. <\/div><\/div>\n<p class=\"p1\"><\/div>\n<ol start=\"4\"><\/ol>\n<p>By integrating these strategies into your website management and development processes, you can reduce the risk of being victim to formjacking attacks and ensure the security of your users\u2019 sensitive information.<\/p>\n<h2><span id=\"formjacking_examples\">Formjacking Examples<\/span><\/h2>\n<p>Below are some notable real-world examples of formjacking incidents, highlighting the consequences and the lessons learned from each event.<\/p>\n<p class=\"p1\"><div class=\"su-tabs su-tabs-style-default su-tabs-mobile-stack su-tabs-vertical\" data-active=\"1\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-tabs-nav\"><span class=\"\" data-url=\"\" data-target=\"blank\" tabindex=\"0\" role=\"button\"><strong>British Airways (2018)<\/strong><\/span><span class=\"\" data-url=\"\" data-target=\"blank\" tabindex=\"0\" role=\"button\"><strong>Ticketmaster (2018)<\/strong><\/span><span class=\"\" data-url=\"\" data-target=\"blank\" tabindex=\"0\" role=\"button\"><strong>Newegg (2018)<\/strong><\/span><span class=\"\" data-url=\"\" data-target=\"blank\" tabindex=\"0\" role=\"button\"><strong>Multiple Universities (2019)<\/strong><\/span><\/div><div class=\"su-tabs-panes\"><div class=\"su-tabs-pane su-u-clearfix su-u-trim\" data-title=\"&lt;strong&gt;British Airways (2018)&lt;\/strong&gt;\">\n<p class=\"p1\"><strong>Consequences<\/strong>: <a href=\"https:\/\/beale-law.com\/article\/british-airways-settles-data-breach-class-action-what-now\/\" target=\"_blank\">Hackers stole personal and payment information<\/a> from approximately 380,000 transactions and the company faced a \u00a3183 million fine <a href=\"https:\/\/www.techopedia.com\/definition\/32263\/general-data-protection-regulation-gdpr\">under GDPR regulations<\/a>.<\/p>\n<p class=\"p1\"><strong>Lessons Learned<\/strong>: Emphasized the need for robust security measures on payment processing systems and compliance with data protection regulations.<\/p>\n<p class=\"p1\"><\/div>\n<div class=\"su-tabs-pane su-u-clearfix su-u-trim\" data-title=\"&lt;strong&gt;Ticketmaster (2018)&lt;\/strong&gt;\">\n<p class=\"p1\"><strong>Consequences<\/strong>: The <a href=\"https:\/\/symantec-enterprise-blogs.security.com\/blogs\/threat-intelligence\/formjacking-attacks-retailers\" target=\"_blank\">personal and payment details of thousands of customers were compromised<\/a> over several months.<\/p>\n<p><strong>Lessons Learned<\/strong>: Highlighted vulnerabilities in third-party components of websites and the importance of monitoring and securing these elements.<\/p>\n<p class=\"p1\"><\/div>\n<div class=\"su-tabs-pane su-u-clearfix su-u-trim\" data-title=\"&lt;strong&gt;Newegg (2018)&lt;\/strong&gt;\">\n<p class=\"p1\"><strong>Consequences<\/strong>: <a href=\"https:\/\/www.itpro.com\/cyber-attacks\/31992\/british-airways-ticketmaster-and-newegg-hacks-part-of-massive-magecart\" target=\"_blank\">Credit card information of potentially millions of customers was stolen<\/a> over a month by Magecart attackers.<\/p>\n<p><strong>Lessons Learned<\/strong>: Demonstrated the importance of early detection and rapid response to security breaches to minimize damage.<\/p>\n<p class=\"p1\"><\/div>\n<div class=\"su-tabs-pane su-u-clearfix su-u-trim\" data-title=\"&lt;strong&gt;Multiple Universities (2019)&lt;\/strong&gt;\">\n<p class=\"p1\"><strong>Consequences<\/strong>: Magecart groups targeted over 60 universities and online retailers, stealing countless payment details.<\/p>\n<p><strong>Lessons Learned<\/strong>: Showed the broad scope of formjacking threats and the need for cross-industry cybersecurity awareness and training.<\/p>\n<p class=\"p1\"><\/div><\/div><\/div>\n<h2><span id=\"the_bottom_line\">The Bottom Line<\/span><\/h2>\n<p>Understanding and preventing formjacking is important for the security of both individuals and businesses involved in online transactions. This type of cyberattack, which involves the theft of sensitive information through compromised web forms, poses a serious risk to personal and financial data.<\/p>\n<p>By recognizing the methods used by attackers, such as injecting malicious code into legitimate websites, organizations can better defend against these insidious threats.<\/p>\n<p>Preventive measures, including regular security audits, the use of Content Security Policies, and educating employees about cybersecurity risks, are necessary. These steps help safeguard data and maintain the trust of users who engage with online services.<\/p>\n<p>The threat of formjacking will most definitely continue and evolve as e-commerce and online financial transactions continue to grow. Cybersecurity strategies will need to be constantly updated to keep pace with the sophisticated techniques developed by attackers.<\/p>\n<h2><span id=\"faqs\">FAQs<\/span><\/h2>\n<div class=\"man_faq_sec\" itemscope itemtype=\"https:\/\/schema.org\/FAQPage\"><\/time><section class=\"ms_faq ms_card \" ><div itemscope itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\"><div class=\"accordionButton\"><h3 itemprop=\"name\">What is formjacking in simple terms?<\/h3> <\/div>\n<div class=\"accordionContent\" itemscope itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" style=\"display:none;\"><p itemprop=\"text\">Formjacking is a cyberattack where hackers inject malicious code into online forms on legitimate websites to steal users&#8217; sensitive information, such as credit card details.<\/p>\r\n                <\/div><\/div><\/section>\n<section class=\"ms_faq ms_card \" ><div itemscope itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\"><div class=\"accordionButton\"><h3 itemprop=\"name\">How do you protect against formjacking?<\/h3> <\/div>\n<div class=\"accordionContent\" itemscope itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" style=\"display:none;\"><p itemprop=\"text\">Protect against formjacking by conducting regular security audits, implementing strict Content Security Policies (CSP), and educating staff on cybersecurity practices.<\/p>\r\n                <\/div><\/div><\/section>\n<section class=\"ms_faq ms_card \" ><div itemscope itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\"><div class=\"accordionButton\"><h3 itemprop=\"name\">What type of attack occurs when an attacker captures credit card information?<\/h3> <\/div>\n<div class=\"accordionContent\" itemscope itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" style=\"display:none;\"><p itemprop=\"text\">When an attacker captures credit card information, it is typically through a formjacking attack.<\/p>\r\n                <\/div><\/div><\/section>\n<section class=\"ms_faq ms_card \" ><div itemscope itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\"><div class=\"accordionButton\"><h3 itemprop=\"name\">What is an example of Formjacking?<\/h3> <\/div>\n<div class=\"accordionContent\" itemscope itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" style=\"display:none;\"><p itemprop=\"text\">An example of formjacking occurred in 2018 when British Airways&#8217; website was compromised, resulting in the theft of credit card information from approximately 380,000 transactions.<\/p>\r\n                <\/div><\/div><\/section>\n<section class=\"ms_faq ms_card \" ><div itemscope itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\"><div class=\"accordionButton\"><h3 itemprop=\"name\">How does Magecart work?<\/h3> <\/div>\n<div class=\"accordionContent\" itemscope itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" style=\"display:none;\"><p itemprop=\"text\">Magecart groups operate by injecting malicious JavaScript code into the payment forms of e-commerce sites to siphon off credit card data during the transaction process.<\/p>\r\n                <\/div><\/div><\/section>\n<div class=\"reference-content\">\n<div class=\"reference-heading reference-content-collapsible-heading\">\n<h2><span id=\"references\">References<\/span><\/h2>\n<\/div>\n<div class=\"reference-content-body\">\n<ol>\n<li><a href=\"https:\/\/www.akamai.com\/glossary\/what-is-magecart\" target=\"_blank\">What Is Magecart?<\/a> (Akamai)<\/li>\n<li><a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Security\/Subresource_Integrity\" target=\"_blank\">Subresource Integrity &#8211; Security on the web<\/a> (Developer.mozilla)<\/li>\n<li><a href=\"https:\/\/beale-law.com\/article\/british-airways-settles-data-breach-class-action-what-now\/\" target=\"_blank\">British Airways settles data breach class action \u2013 what now? | Beale &amp; Co<\/a> (Beale-law)<\/li>\n<li><a href=\"https:\/\/symantec-enterprise-blogs.security.com\/blogs\/threat-intelligence\/formjacking-attacks-retailers\" target=\"_blank\">Formjacking: Major Increase in Attacks on Online Retailers | Symantec Enterprise Blogs<\/a> (Symantec-enterprise-blogs.security)<\/li>\n<li><a href=\"https:\/\/www.itpro.com\/cyber-attacks\/31992\/british-airways-ticketmaster-and-newegg-hacks-part-of-massive-magecart\" target=\"_blank\">British Airways, Ticketmaster and Newegg hacks part of massive Magecart formjacking campaign | ITPro<\/a> (Itpro)<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>What is Formjacking? Formjacking is the software equivalent of credit card skimming. It is a portmanteau combining \u201cform\u201d with part of \u201chi-jacking.\u201d It steals credit card details from online forms, usually on e-commerce sites. Affected websites still operate as normal, making it difficult to detect. What is formjacking? It is the invisible thief. Credit card [&hellip;]<\/p>\n","protected":false},"author":286520,"featured_media":224506,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"_lmt_disableupdate":"","_lmt_disable":"","om_disable_all_campaigns":false,"footnotes":""},"definitioncat":[255,218],"class_list":["post-117276","definition","type-definition","status-publish","format-standard","has-post-thumbnail","hentry","definitioncat-cyber-threats","definitioncat-cybersecurity"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What is Formjacking? Definition, How It Works &amp; Examples<\/title>\n<meta name=\"description\" content=\"Formjacking is a fusion of &quot;form&quot; and &quot;hi-jacking,&quot; which covertly steals credit card information from online forms. Learn more with Techopedia.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Formjacking\" \/>\n<meta property=\"og:description\" content=\"Formjacking is a fusion of &quot;form&quot; and &quot;hi-jacking,&quot; which covertly steals credit card information from online forms. Learn more with Techopedia.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.techopedia.com\/definition\/formjacking\" \/>\n<meta property=\"og:site_name\" content=\"Techopedia\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/techopedia\/\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-19T13:50:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/1-What-is-Formjacking-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1280\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@techopedia\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"14 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.techopedia.com\/definition\/formjacking#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/formjacking\"},\"author\":{\"name\":\"Marshall Gunnell\",\"@id\":\"https:\/\/www.techopedia.com\/#\/schema\/person\/1567ab91e6d542d462510643a1874607\"},\"headline\":\"Formjacking\",\"datePublished\":\"2023-10-25T15:56:30+00:00\",\"dateModified\":\"2024-04-19T13:50:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/formjacking\"},\"wordCount\":2919,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.techopedia.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/formjacking#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/1-What-is-Formjacking-scaled.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.techopedia.com\/definition\/formjacking#respond\"]}],\"articleSection\":\"\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.techopedia.com\/definition\/formjacking\",\"url\":\"https:\/\/www.techopedia.com\/definition\/formjacking\",\"name\":\"What is Formjacking? Definition, How It Works & Examples\",\"isPartOf\":{\"@id\":\"https:\/\/www.techopedia.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/formjacking#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/formjacking#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/1-What-is-Formjacking-scaled.jpg\",\"datePublished\":\"2023-10-25T15:56:30+00:00\",\"dateModified\":\"2024-04-19T13:50:38+00:00\",\"description\":\"Formjacking is a fusion of \\\"form\\\" and \\\"hi-jacking,\\\" which covertly steals credit card information from online forms. Learn more with Techopedia.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/formjacking#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.techopedia.com\/definition\/formjacking\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.techopedia.com\/definition\/formjacking#primaryimage\",\"url\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/1-What-is-Formjacking-scaled.jpg\",\"contentUrl\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/1-What-is-Formjacking-scaled.jpg\",\"width\":2560,\"height\":1280,\"caption\":\"What is Formjacking? Definition, How It Works & Examples\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.techopedia.com\/definition\/formjacking#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.techopedia.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cybersecurity\",\"item\":\"https:\/\/www.techopedia.com\/topic\/4\/cybersecurity\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Cyber Threats\",\"item\":\"https:\/\/www.techopedia.com\/topic\/220\/cyber-threats\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Term\",\"item\":\"https:\/\/www.techopedia.com\/definition\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Formjacking\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.techopedia.com\/#website\",\"url\":\"https:\/\/www.techopedia.com\/\",\"name\":\"Techopedia\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.techopedia.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.techopedia.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.techopedia.com\/#organization\",\"name\":\"Techopedia\",\"url\":\"https:\/\/www.techopedia.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.techopedia.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2025\/02\/techopedia-light-logo.svg\",\"contentUrl\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2025\/02\/techopedia-light-logo.svg\",\"caption\":\"Techopedia\"},\"image\":{\"@id\":\"https:\/\/www.techopedia.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/techopedia\/\",\"https:\/\/x.com\/techopedia\",\"https:\/\/www.linkedin.com\/company\/techopedia\/\",\"https:\/\/www.youtube.com\/c\/Techopedia\"],\"publishingPrinciples\":\"https:\/\/www.techopedia.com\/about\/editorial-policy\",\"ownershipFundingInfo\":\"https:\/\/www.techopedia.com\/about\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.techopedia.com\/#\/schema\/person\/1567ab91e6d542d462510643a1874607\",\"name\":\"Marshall Gunnell\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.techopedia.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/05\/avatar_user_286520_1683873714-300x300.jpg\",\"contentUrl\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/05\/avatar_user_286520_1683873714-300x300.jpg\",\"caption\":\"Marshall Gunnell\"},\"description\":\"Marshall, a Mississippi native, is a dedicated IT and cybersecurity expert with over a decade of experience. Along with Techopedia, his articles can be found on Business Insider, PCWorld, VGKAMI, How-To Geek, and Zapier. His articles have reached a massive audience of over 100 million people. Marshall previously served as the Chief Marketing Officer (CMO) and technical staff writer at StorageReview, providing comprehensive news coverage and detailed product reviews on storage arrays, hard drives, SSDs, and more. He also developed sales strategies based on regional and global market research to identify and create new project initiatives. Currently, Marshall resides in Tokyo, Japan. When he's not working, he spends his time diligently breaking down complex subjects for the masses, mastering the Japanese language, savoring budget-friendly sake, indulging in onsens, and hiking through Japan's picturesque mountains.\",\"sameAs\":[\"https:\/\/vgkami.com\/\",\"https:\/\/www.linkedin.com\/in\/marshallgunnell\",\"https:\/\/x.com\/https:\/\/twitter.com\/makojunkie_\",\"https:\/\/www.youtube.com\/@vgkami\"],\"knowsAbout\":[\"IT & Cybersecurity Expert\"],\"url\":\"https:\/\/www.techopedia.com\/contributors\/marshallgunnell\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What is Formjacking? Definition, How It Works & Examples","description":"Formjacking is a fusion of \"form\" and \"hi-jacking,\" which covertly steals credit card information from online forms. Learn more with Techopedia.","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"Formjacking","og_description":"Formjacking is a fusion of \"form\" and \"hi-jacking,\" which covertly steals credit card information from online forms. Learn more with Techopedia.","og_url":"https:\/\/www.techopedia.com\/definition\/formjacking","og_site_name":"Techopedia","article_publisher":"https:\/\/www.facebook.com\/techopedia\/","article_modified_time":"2024-04-19T13:50:38+00:00","og_image":[{"width":2560,"height":1280,"url":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/1-What-is-Formjacking-scaled.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@techopedia","twitter_misc":{"Est. reading time":"14 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.techopedia.com\/definition\/formjacking#article","isPartOf":{"@id":"https:\/\/www.techopedia.com\/definition\/formjacking"},"author":{"name":"Marshall Gunnell","@id":"https:\/\/www.techopedia.com\/#\/schema\/person\/1567ab91e6d542d462510643a1874607"},"headline":"Formjacking","datePublished":"2023-10-25T15:56:30+00:00","dateModified":"2024-04-19T13:50:38+00:00","mainEntityOfPage":{"@id":"https:\/\/www.techopedia.com\/definition\/formjacking"},"wordCount":2919,"commentCount":0,"publisher":{"@id":"https:\/\/www.techopedia.com\/#organization"},"image":{"@id":"https:\/\/www.techopedia.com\/definition\/formjacking#primaryimage"},"thumbnailUrl":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/1-What-is-Formjacking-scaled.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.techopedia.com\/definition\/formjacking#respond"]}],"articleSection":""},{"@type":"WebPage","@id":"https:\/\/www.techopedia.com\/definition\/formjacking","url":"https:\/\/www.techopedia.com\/definition\/formjacking","name":"What is Formjacking? Definition, How It Works & Examples","isPartOf":{"@id":"https:\/\/www.techopedia.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.techopedia.com\/definition\/formjacking#primaryimage"},"image":{"@id":"https:\/\/www.techopedia.com\/definition\/formjacking#primaryimage"},"thumbnailUrl":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/1-What-is-Formjacking-scaled.jpg","datePublished":"2023-10-25T15:56:30+00:00","dateModified":"2024-04-19T13:50:38+00:00","description":"Formjacking is a fusion of \"form\" and \"hi-jacking,\" which covertly steals credit card information from online forms. Learn more with Techopedia.","breadcrumb":{"@id":"https:\/\/www.techopedia.com\/definition\/formjacking#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.techopedia.com\/definition\/formjacking"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.techopedia.com\/definition\/formjacking#primaryimage","url":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/1-What-is-Formjacking-scaled.jpg","contentUrl":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/10\/1-What-is-Formjacking-scaled.jpg","width":2560,"height":1280,"caption":"What is Formjacking? Definition, How It Works & Examples"},{"@type":"BreadcrumbList","@id":"https:\/\/www.techopedia.com\/definition\/formjacking#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.techopedia.com\/"},{"@type":"ListItem","position":2,"name":"Cybersecurity","item":"https:\/\/www.techopedia.com\/topic\/4\/cybersecurity"},{"@type":"ListItem","position":3,"name":"Cyber Threats","item":"https:\/\/www.techopedia.com\/topic\/220\/cyber-threats"},{"@type":"ListItem","position":4,"name":"Term","item":"https:\/\/www.techopedia.com\/definition"},{"@type":"ListItem","position":5,"name":"Formjacking"}]},{"@type":"WebSite","@id":"https:\/\/www.techopedia.com\/#website","url":"https:\/\/www.techopedia.com\/","name":"Techopedia","description":"","publisher":{"@id":"https:\/\/www.techopedia.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.techopedia.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.techopedia.com\/#organization","name":"Techopedia","url":"https:\/\/www.techopedia.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.techopedia.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2025\/02\/techopedia-light-logo.svg","contentUrl":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2025\/02\/techopedia-light-logo.svg","caption":"Techopedia"},"image":{"@id":"https:\/\/www.techopedia.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/techopedia\/","https:\/\/x.com\/techopedia","https:\/\/www.linkedin.com\/company\/techopedia\/","https:\/\/www.youtube.com\/c\/Techopedia"],"publishingPrinciples":"https:\/\/www.techopedia.com\/about\/editorial-policy","ownershipFundingInfo":"https:\/\/www.techopedia.com\/about"},{"@type":"Person","@id":"https:\/\/www.techopedia.com\/#\/schema\/person\/1567ab91e6d542d462510643a1874607","name":"Marshall Gunnell","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.techopedia.com\/#\/schema\/person\/image\/","url":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/05\/avatar_user_286520_1683873714-300x300.jpg","contentUrl":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/05\/avatar_user_286520_1683873714-300x300.jpg","caption":"Marshall Gunnell"},"description":"Marshall, a Mississippi native, is a dedicated IT and cybersecurity expert with over a decade of experience. Along with Techopedia, his articles can be found on Business Insider, PCWorld, VGKAMI, How-To Geek, and Zapier. His articles have reached a massive audience of over 100 million people. Marshall previously served as the Chief Marketing Officer (CMO) and technical staff writer at StorageReview, providing comprehensive news coverage and detailed product reviews on storage arrays, hard drives, SSDs, and more. He also developed sales strategies based on regional and global market research to identify and create new project initiatives. Currently, Marshall resides in Tokyo, Japan. When he's not working, he spends his time diligently breaking down complex subjects for the masses, mastering the Japanese language, savoring budget-friendly sake, indulging in onsens, and hiking through Japan's picturesque mountains.","sameAs":["https:\/\/vgkami.com\/","https:\/\/www.linkedin.com\/in\/marshallgunnell","https:\/\/x.com\/https:\/\/twitter.com\/makojunkie_","https:\/\/www.youtube.com\/@vgkami"],"knowsAbout":["IT & Cybersecurity Expert"],"url":"https:\/\/www.techopedia.com\/contributors\/marshallgunnell"}]}},"_links":{"self":[{"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/definition\/117276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/definition"}],"about":[{"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/types\/definition"}],"author":[{"embeddable":true,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/users\/286520"}],"replies":[{"embeddable":true,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/comments?post=117276"}],"version-history":[{"count":0,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/definition\/117276\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/media\/224506"}],"wp:attachment":[{"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/media?parent=117276"}],"wp:term":[{"taxonomy":"definitioncat","embeddable":true,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/definitioncat?post=117276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}