Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack

Cybersecurity researchers have unearthed a new ongoing Magecart-style web skimmer campaign that's designed to steal personally identifiable information (PII) and credit card data from e-commerce websites.
A noteworthy aspect that sets it apart from other Magecart campaigns is that the hijacked sites further serve as "makeshift" command-and-control (C2) servers, using the cover to facilitate the

aspect attack campaign campaigns card command commerce control credit credit card cybersecurity data e-commerce exploited hijacked information magecart magento personally identifiable information pii researchers servers shopify skimmer steal web websites web skimmer woocommerce wordpress