Malware Analysis and Reverse Engineering: Analysing Magecart Skimmer

### Executive summary This report analyzes a Magecart web‑skimmer sample, describing how attackers inject obfuscated JavaScript into checkout pages, decode and rotate token arrays, attach listeners to form submit buttons to capture cardholder data (card number, CVV, names), store it locally, encrypt it with a hardcoded public key via JSEncrypt, and exfiltrate it to attacker servers; the analysis highlights supply‑chain implications and common evasion techniques like Base64 encoding and code obfuscation.