Tech-support Scams and Credit Card Hijacking

Zscaler ThreatLabZ reports active campaigns abusing compromised DotNetNuke and Magento sites: obfuscated JavaScript injections on DNN pages trigger tech-support scareware popups (including audio and calls to paid support) while injected scripts on Magento checkouts inject fake payment forms that exfiltrate credit card data. The report documents attack chains, redirection behavior, code obfuscation, estimated scale (≈2,000 affected DNN pages and ≈400 Magento domains over three months), and provides lists of compromised sites for remediation.