Black Friday Alert : 4 Emerging Skimming Attacks

Zscaler ThreatLabz observed multiple active Magecart-style web skimming campaigns since mid-2022 targeting Magento and PrestaShop stores in the US, UK, Australia, and Canada; attackers inject (often obfuscated) JavaScript into checkout pages, capture payment and shipping data, and exfiltrate it to attacker-controlled domains that largely evade detection. The report details four distinct groups, their behavior, persistence, detection-evasion techniques, example payloads/URLs, and a comprehensive set of IOCs to help defenders identify and remediate infections.