Magecart Firestore Infrastructure Access

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•1

Identifies network traffic to a specific malicious Google Firestore project ('braintree-payment-app') used by a Magecart campaign for C2 and data exfiltration.