Hundreds of Online Stores Hacked to Steal Credit Card Details

A JavaScript skimming campaign targeting Magento stores injected obfuscated malicious JavaScript—likely via an unidentified common vulnerability—so it could capture payment card data at checkout and exfiltrate it to a network of attacker-controlled domains (over a dozen listed). The report warns store owners and consumers to prioritize patches, monitoring, and defensive controls to mitigate further theft.