Context
PrestaShop 1.7.8 store with an extensive module ecosystem. After discovery of a vulnerability in the official ps_facetedsearch module it needed immediate intervention — a skimmer sat on the payment card. Stakes: customer data and sales continuity.
Scope
- Investigation — CLI logs, file-change chronology, attack-vector identification (card/data skimmer).
- Cleanup and patching — isolation of infected code, vulnerability patch, updates of critical modules.
- Hardening — rotation of application secret keys, production credential changes, restoration of API integrity.
Result
- The store accepts payments again without a skimmer; customers are not losing card data.
- PrestaShop 1.7 incident response — skimmer remediation, secret rotation, API hardening.
Further development
Store maintenance, custom product exports and integrations with Baselinker and marketing tools.