Global Magecart Campaign Targets Six Card Networks

Silent Push has identified a long-running Magecart web-skimming campaign (active since ~2022) that injects highly obfuscated JavaScript (e.g., cdn-cookie.com/recorder.js) into e-commerce payment pages to create fake payment forms and steal cardholder, address, and shipping details; the report describes the infection chain, provides indicators and a sample domain, highlights that major payment networks are targeted, and recommends mitigations such as CSP, PCI DSS compliance, patching, strong admin controls/MFA, and monitoring.