Widespread Magecart Campaign Targets Users of All Major Credit Cards

Silent Push identified a long-running Magecart campaign (active since at least Jan 2022) using malicious domains to inject fake payment forms that skim names, addresses, and card details. The skimmer evades detection by removing itself when site admins are present and targets customers across major payment networks, making it a broad consumer-facing credit card theft operation.