Looking at how many sites use vulnerable JavaScript libraries

Re:Looking at how many sites use vulnerable JavaScript libra... by CapacitorSet on Wednesday November 22, 2017 @07:22PM (#15761838)

I don't understand, what were the scammers trying to achieve?

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by mr_toad on Wednesday November 22, 2017 @07:32PM (#15761900)

Trying to validate stolen or generated credit card numbers.

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by jacquesm on Wednesday November 22, 2017 @08:54PM (#15762221)

That's not always what is going on. In some cases unscrupulous operators will run through large numbers of $1 transactions in order to lower their chargeback rate.

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by nicksantamaria on Thursday November 23, 2017 @05:17AM (#15764137)

This sounds interesting - can you explain further?

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by jacquesm on Thursday November 23, 2017 @05:23AM (#15764152)

Chargebacks have a cap, if you go over that cap you get fined or lose your merchant account. So in order to dilute the pool they'll make a lot of low $ amount charges usually masquerading as some charity, those will have very low charge back rates so the average charge back %age will drop.

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by megaman22 on Wednesday November 22, 2017 @07:26PM (#15761857)

Maybe hoping there was an affirmative response if the card did go through?

[ Parent | on HN ]