Threat Hunting Edition

Magecart is an active JavaScript-based credit-card skimming campaign that injects malicious scripts into compromised websites to steal payment data; the report outlines recent victims (e.g., British Airways, Ticketmaster, OXO), detection via searching HTTP bodies for known malicious domains (using Censys), and recommended mitigations including Subresource Integrity (SRI) and Content Security Policy (CSP).