SHOCKING: OnePlus website was hacked to steal credit card information!

The Oneplus website was hacked and lost lots of critical information!

It looks like OnePlus is in great trouble! Recently, we spotted hundreds of angry OnePlus users discussing their credit card fraud situations in a Reddit topic. In details, there are many complaints about suspicious activity on their credit cards. Based on many reports, the first ever fraud action took place just within a year after they used their credit card to purchase OnePlus’ products on the official website.

Moreover, a cybersecurity firm name Fidus also shared their insight into the OnePlus site problem. They have discovered a website vulnerability that could lead to malicious hackers to steal sensitive information from OnePlus customers. Furthermore, the firm also claimed that the payment process is usually the target of attack. On the other hand, Fidus suggests where the attack can come from, and the weakest link might be the Magento eCommerce platform.

In their statement, Fidus has mentioned that “We stepped through the payment process on the OnePlus website to have a look what was going on. Interestingly enough, the payment page which requests the customer’s card details hosted ON-SITE”. As a result, “this means all payment details entered, albeit briefly, flow through the OnePlus website and can be in danger.” Finally, “while the payment details are sent off to a third-party provider upon form submission, there is a window in which malicious code can syphon credit card details before the data encrypted.”

Will OnePlus release an official statement for OnePlus website issue soon?

Until now, OnePlus hasn’t reached out to explain about the OnePlus website problem yet. Moreover, there are also many smartphone fans have raised their doubt on Fidus’ discovery. We will keep you update on the issue when more details come out. For now, which side are you on? Drop a comment to let us know!