Detecting Magecart-Style attacks with Page Shield

What this post added

This post details the technical implementation of Page Shield for detecting Magecart-style attacks. It explains how the system uses Content Security Policies (CSP) reports, threat intelligence feeds, and ML-based static analysis. Specifically, it describes the use of Abstract Syntax Trees (ASTs) and data flow graphs to identify malicious scripts by analyzing data flow properties, detecting connections between PII reads and data exfiltration calls. It also covers the detection of obfuscated malicious scripts by normalizing content and analyzing 'revealed-risk', and handling scripts with arbitrary string transformations.