Cyberattacks once again Trap Black Friday Shoppers

ThreatLabz observed a spike in holiday-targeted e-commerce attacks where attackers injected obfuscated JavaScript skimmers into legitimate shopping sites (Magento and WooCommerce) to capture and exfiltrate payment data during Black Friday/Cyber Monday. The report details multiple cases (including the Grelos skimmer), describes techniques such as cookie storage, altered HTML field IDs, base64-encoded exfiltration, anti-debug checks, and lists observed exfiltration/redirect domains to help defenders identify and block these campaigns.