Silent Push Exposes Magecart Network Operating Since Early 2022

Silent Push disclosed a long-running Magecart web‑skimming campaign that used domains such as cdn-cookie.com (hosted on ASN 209847) to deliver highly obfuscated JavaScript skimmers that exfiltrate credit card data from multiple major payment networks. Researchers identified ~600 lines of obfuscated JS, multiple infection instances dating back to January 2022, associated infrastructure, and recommended mitigations including Content Security Policy (CSP), PCI DSS adherence, and regular administrative checks to detect injections.