New Magecart Attack Inject Malicious JavaScript to Skim Payment Data

A Magecart-style campaign is compromising ecommerce websites by injecting obfuscated JavaScript skimmers that hook into checkout forms to capture credit card and billing data in real time and exfiltrate it to attacker-controlled domains (notably cc-analytics.com and pstatics.com); the report describes the infection mechanism, persistence, and evasive obfuscation techniques posing significant risk to online retailers and their customers.