StyleSmuggler Exploitation Deploys PSK Agent RAT Against Magento Stores

The StyleSmuggler campaign demonstrates how rapidly threat actors weaponize newly disclosed vulnerabilities against internet-facing e-commerce platforms, particularly those running Magento and Adobe Commerce. The initial payload's 0% detection rate on VirusTotal highlights the dangerous gap between exploit availability and security tooling catching up, leaving unpatched stores fully exposed during a critical window. Attackers chained a shell-script dropper, a remote access trojan, and a PHP webshell into a sophisticated multi-stage attack, maximizing persistence and control. This matters because Magento stores typically handle payment card data, meaning a successful compromise carries severe regulatory and financial consequences for merchants and their customers.