rule qlogger_loader_WebSkimmer : Magecart WebSkimmer {
	meta:
		author = "Malwarebytes"
		description = "Magecart (q-logger loader)"
		source = "/blog/threat-intelligence/2021/10/q-logger-skimmer-keeps-magecart-attacks-going/"
		date = "2021-10-19"
	strings:
		$regex = /"load",function\(\)\{\(function\(\)\{/
		$regex2 = /while\(!!\[\]\)\{try{var/
		$regex3 = /\(\w\['shift'\]\(\)\);\}\}\}/
	condition:
		all of them
}