Source: bleepingcomputer.com
A credit card skimming group compromised a shared analytics script belonging to e-commerce platform Convertr. The attackers injected malicious code into the script to steal payment card data from shoppers during the checkout process. This is a supply chain attack targeting e-commerce sites that rely on Convertr's analytics. Multiple online stores using the compromised script were likely affected simultaneously. The attack follows a common Magecart-style approach where shared third-party scripts are weaponized to maximize reach. Payment data including card numbers and related checkout information was the primary target. The incident highlights risks associated with third-party script dependencies in e-commerce environments.
