Ma

gen
toCRO|Ma
gen
toDe
v
www.
The
Comme
rce
Sho
p.c
om

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
CaseStudy

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
Under
standi
ng

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
eCommer
ce
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
Secur
it
y
.
.
.
.
.
.
-
AMagent
oCas
eSt
udy

As
peci
alt
yonl
ines
por
tspr
oductcompanyi
snow
s
ecur
edandt
hri
ving:

20% 2Sec 30%

I
ncreaseI
n Decreas
eIn I
ncreas
eIn
Orders PageLoadTime Organi
cTr
affic

(
404)547-
6474
7000Cent
ralPar
kway,
Sui
te220,
At
lant
a,GA30328
hel
lo@t
hecommer
ces
hop.
com
 Under
standi
ngeCommer
ceSecur
it
y-AMagent
oCas
eSt
udy|TheCommer .
ceShop 2

ThePr
obl
em
Ourcl
ient
'sMagent
owebs
itewas
compr
omi
sedwhenhi
jacker
sgot
acces
stot
hei
radmi
ncr
edent
ial
s.
Theyi
nject
edmal
ici
ouscodest
hat
wasdi
sgui
sedasa3rdpar
tyt
oolt
o
capt
urecus
tomer
s'cr
edi
tcar
ddet
ail
s.
Wheneveracus
tomermadeapur
-
chas
e,hecoder
t out
est
hei
rcr
edi
t

About car
ddet
ai
hacker
.I
l
sanddel
t
'ss
impl
iver
si
ebutcl
tt
ot
ever
l
he
yhi
dden
TheCl
ient asnoneoft
het
radi
ti
onals
ecur
it
y
s
canscoul
ddet
ecti
t.Al
sot
hehacker
s
Ourcl ientisa wer
ecl
everenought
onotmakeus
e
promi nenteCom- ofal
lthecr
edi
tcar
dinf
ormat
iont
oti
p
mer cewebsi tesell
- t
heeCommer
ceadmi
nthatcr
uci
ali
n-

ingvar ioussports f
ormat
ionwasl
eakedt
hrought
hei
r
webs
ite.
gear .
Theyexper i-
encet rafficfr
om all Thes
car
ies
tpar
twast
hatt
hecl
ient
overt
anaver
si
j
onr
“
hewor

at
ust1%.
l
dwi t
ageconver
eof
h neverr
pr
obl
cl
i
eal
em.
lyknew t
Ther
ealr
entappr
wasadr
want
as
edt
t
i
hei
eas
heyhads
onwhyt
he
oacheduswast
cf
rs
al
i
t
li
nthei
rt
ebackont
r
r
ucha

hatt
af
her
e
ficand
ack.

Thes
car
ies
tpar
twast
hat

thecl
ientneverreal
ly
knewtheyhads uchaprobl
em.
HowWeFoundTheSecur
it
yThr
eat
Under
standi
ngeCommer
ceSecur
it
y-AMagent
oCas
eSt
udy|TheCommer .
ceShop 3

Asar
out
ines
tepi
nouraudi
t,wer
ant
hewebs
itet
hroughas
eri
esofs
tandar
dse-
cur
it
ytes
tsandi
tpas
sed.
Itwasonl
ywhenwel
oadedt
hewebs
iteonani
ndepen-
dents
erver
,wewi
tnes
sedt
headdi
ti
onalpi
ngt
oanext
ernals
ite.
Aft
erf
urt
her
manualcoder
evi
ews
,wedet
ect
edt
hemal
ici
ouscodesandcl
ear
edt
hem.

Wehaveacces
stos
omeoft
hemos
tpr
emi
um s
ecur
it
yscans
ervi
cesandnoneof
i
tcoul
dact
ual
lydet
ectt
het
hreat
.Itr
eal
lyi
sanyeCommer
cewebs
ite'
swor
st
ni
ght
mar
es.
Thankf
ull
y,noneoft
hecl
ient
’scus
tomer
shadanycompl
aint
sofun-
knownchar
gescr
edi
tedont
hei
rcr
edi
tcar
ds.

HowWeSecur
edTheWebs
ite
Theonl
ywayt
hehacker
scoul
dhavepl
ant
edt
hemal
ici
ouscodeont
heweb-
s
itei
sthr
oughs
omeonewhohadacces
stot
hei
rlogi
ncr
edent
ial
s.Thes
itehad
notbeenhackedf
rom out
side.
Wedi
dthef
oll
owi
ngont
hes
ite:

. Setupanadmi
nact
ivi
tyt
rackers
owegotnot
ifiedever
yti
mes
omeone
us
edt
headmi
ncr
edent
ial
stol
ogont
othewebs
ite.
Thi
skeptunwant
ed
handsof
fthewebs
ite.

. SetupaSucur
iMagent
oscannert
ofr
equent
lys
cant
heeCommer
ceweb-
s
itef
oranymal
ici
ousact
ivi
ti
es.

. Ver
sioncont
rol
ledt
heent
ir
ewebs
itecodeonGi
ttor
eflectanychanges
madewi
thi
nthewebs
ite

. I
nst
all
edFr
audBl
ockt
oonl
yletl
egi
ti
mat
etr
ans
act
iont
otakepl
ace.
Thi
s
madeus
eoft
hes
hopper
'sI
Paddr
ess
,numberofpaymentat
tempt
s,et
c.
t
ost
opanys
tol
encr
edi
tcar
dtr
ans
act
ion.

. Enabl
ed3DSecur
it
yforal
lMas
terandVi
sacr
edi
tcar
dtr
ans
act
ion
 . Enabl
char
edSi
gni
fydmodul
gebackpr
otect
i
et
on.
or
Wet
Under

educef
r
standi

audul
heneducat
ngeCommer

entt
edt
r
hecl
i
ans
act
i
ceSecur
it
y-AMagent

onsandboos
entaboutt
hei
mpor
-
t
oCas
eSt
udy|TheCommer .
ceShop 4

t
anceofs
ecur
edwebs
itecr
edent
ial
sandt
hecons
equencesofwhat
coul
dhappent
othei
rwebs
itei
fsomeonehadcompl
etecont
roloveri
t.
Thi
scl
ear
edupt
hewebs
itei
ssuesandal
sohel
pedcus
tomerr
educe
t
hei
rtr
ans
act
ionandchar
gebackwor
ries
.

HowWeHel pedThem I
mpr
ove
Thei
rConver
sion
Thecl
ienthadapr
ett
ygoodt
raf
ficandr
etent
ionr
ateduet
othei
runi
quepr
oduct
cat
alog.
But
,theys
truggl
edwi
tht
hei
rconver
sions
,whi
chwashover
ingar
ound
0.
9%.
Toi
mpr
oveconver
sions
,

. Weopt
imi
zedt
hewebs
itef
orabet
ters
itel
oadi
ngt
ime.

. Incor
poratedthelow pri
ceguar
anteemoduletolets
hopper
s
know thattheyar
eget t
ingt
hebestdealoutt
here.

. Perf
ormedSEOopti
miz
ati
ont
oregulat
ethet
raf
ficandgeti
n
tar
getedcus
tomer
sontot
hewebsi
te.

. I
ncor
por
atedGoogl
eri
chs
nippett
oat
tractt
arget
edcus
tomer
s.

. I
nstal
ledrevi
ewsmodul
etohel
pimpr
oveonpager
anki
ngf
or
t
argetedkeywor
ds.

TheRes
ult
I
n3mont
hsaf
tert
hechanges
,wehavenotwi
tnes
sedanys
ecur
it
ythr
eat
s.The
conver
sionr
atehasal
soi
ncr
eas
edby0.
5%.
Thecl
ienti
sext
remel
yhappyand
haveext
endedt
hei
rser
vicest
oincor
por
atemor
econver
sionbas
edchanges
t
oimpr
ovet
hei
rROI
.
 7000Cent
ral
Par
kway,
Sui
te220,
Atl
ant
a,GA30328
Phone:
(404)547-
6474
hel
lo@t
hecommer
ces
hop.
com

T
heCommer
ceShop2017.Al
lri
ght
sres
erved.

Al
lri
ght
sres
erved.Nopar
toft
hispubl
icat
iont
extmaybeupl
oadedorpos
tedonl
inewi
thoutt
hepr
iorwr
it
ten
per
mis
sionoft
hepubl
isher
.Forper
mis
sionr
eques
ts,wr
it
etot
hepubl
isher
,addr
ess
ed“At
tent
ion:Per
mis
sions
Reques
t,”t
ohel
lo@t
hecommer
ces
hop.
com