Greenworks

Greenworks operates as a distributor of power tools, offering a range of equipment for both consumer and professional markets. The company is known by the alias Greenworks and maintains its headquarters in the United States of America. Its core business involves sourcing, stocking, and supplying various power tool products to customers through multiple channels.

A significant portion of Greenworks’ sales occurs via its United States‑based website, where shoppers can browse inventory, add items to a cart, and complete purchases through an online checkout process. This e‑commerce platform collects payment card information, account credentials, and personal details during transactions. The website’s functionality is essential to the company’s reach and customer service model.

On June 8 2020, a sophisticated self‑destructing payment card skimmer compromised the Greenworks website, injecting malicious code that activated only when users moved their mouse to evade automated detection scripts. The skimmer concealed itself from browser developer tools and was programmed to self‑destruct if tampered with by researchers, employing obfuscated code and anti‑analysis techniques similar to earlier skimming campaigns. Hosted on a domain acquired with cryptocurrency, the script remained active even after its discovery and despite notifications from security researchers, potentially affecting thousands of customers amid a notable recent increase in site traffic. The incident resulted in the theft of payment card data, login credentials, and personal information entered during checkout.