Web threat glossary
Short, technical definitions of the client-side threats our scanner is built to catch.
Magecart
A broad umbrella for dozens of groups running JavaScript card-data theft campaigns on e-commerce payment pages.
ClickFix (Fake CAPTCHA)
A social-engineering lure that tricks a visitor into pasting a PowerShell or Run-dialog command presented as a 'confirm you're human' step.
Web Skimmer
A client-side script that steals payment-card data or credentials from forms, typically exfiltrating them to an attacker-controlled domain.
Exploit Kit
A server-side framework that fingerprints the visitor's browser and serves a tailored exploit for an unpatched vulnerability.
Drive-by Download
Malware delivered to a visitor simply by loading a compromised or malicious page, without any explicit user action.
Formjacking
A subset of skimming focused on hijacking form submissions to extract credentials, PII, or payment information to an attacker-controlled server.
In-Browser Cryptominer
JavaScript that commandeers the visitor's CPU to mine cryptocurrency — typically Monero — for as long as the page remains open.
Web Skimming
The umbrella term for stealing card data and credentials directly from the browser via injected client-side code; encompasses Magecart and formjacking.
Client-Side Security
The discipline of protecting everything that runs in the visitor's browser — JavaScript, third-party scripts, and their outbound connections — a surface invisible to WAFs.
Supply Chain Attack
Compromising a trusted third-party dependency (script, package, CDN) to reach every site that loads it.
Service Worker Abuse
Using a service worker to host a persistent skimmer or malware that survives page reloads and is invisible to passive scanners.
WebAssembly Malware
A malicious payload compiled to WebAssembly (WASM) to hinder analysis — used for cryptomining, skimmer obfuscation, and anti-analysis logic.