內容簡介
TugraCyber 外掛專為 WooCommerce 的結帳頁面設計，能夠監控每個執行中的腳本，並在腳本內容發生變更時即時警報，以防止 Magecart 風格的信用卡盜取攻擊。
【主要功能】
• 腳本清單管理，記錄每個腳本的 SHA-256 哈希值
• 偵測移除及返回的腳本，提供即時警報
• 偵測延遲加入的腳本，確保安全性
• 監控外部請求，警報新域名的請求
• 提供 PCI DSS 6.4.3/11.6.1 報告
外掛標籤
開發者團隊
原文外掛簡介
TugraCyber keeps an inventory of every script running on your checkout page and alerts you when a script’s content changes silently, which is the signature of Magecart-style card skimming attacks.
Runs only on the checkout page. This is exactly the scope of PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1.
Script inventory. A SHA-256 hash of each script’s content is recorded, so silent changes are caught immediately.
Removed and returning script detection. You get an alert when a known script disappears from the page, or reappears after being marked as removed.
Late-added script detection. Scripts that are added to the checkout page after it has loaded are also inventoried.
Outbound address monitoring. You get an alert when the checkout page starts sending requests to a new external domain, which is where skimmed card data is typically sent.
PCI DSS 6.4.3/11.6.1 report. Available from the dashboard in your TugraCyber account.
This plugin only adds the monitoring agent to your checkout page. The dashboard, alerts and reports live in your TugraCyber account. Setup requires an account and a collector address.
Requirements
WooCommerce must be active (monitoring runs only on the WooCommerce checkout page).
A TugraCyber account and a collector address.
External Services
Through the monitoring script (agent) it places on your checkout page, this plugin sends data to the Collector Endpoint address you enter on the settings page. This address is empty by default: the plugin can be installed, but no data is sent anywhere until you enter an address.
For each script loaded on the checkout page, the data sent is:
the script’s URL (src),
the SHA-256 hash of the script’s content (not the content itself; the hash is an irreversible digest),
the script type (inline or external), your Site ID and your Write Key.
It also sends the domain names only (for example api.stripe.com) of the external addresses the checkout page makes requests to. Paths, query strings, request bodies and responses are never collected.
Page content, customer data, payment information and card numbers are never collected or sent.
If you enter the TugraCyber hosted service at https://tugracyber.com as the Collector Endpoint, data is sent to that service and the following apply:
Terms of Service: https://tugracyber.com/terms
Privacy Policy: https://tugracyber.com/privacy
Alternatively, you can enter the address of a TugraCyber collector instance running on your own server. In that case data goes only to a server under your control and nothing is sent to any third party.
