Online shoppers at risk as Magecart skimming hits major payment networks

A long‑running Magecart web‑skimming campaign active since early 2022 is compromising e‑commerce checkout pages to steal cardholder data for major payment networks (including American Express, Diners Club, Discover, JCB, Mastercard, and UnionPay). The attackers use heavily obfuscated JavaScript, self‑destruct routines, and bulletproof hosting to evade detection and maintain a large network of malicious domains; the report advises mitigations such as virtual/single‑use cards, transaction alerts, strong passwords, and web protection.