Researchers Spot a Different Kind of Magecart Card-Skimming Campaign
In addition to injecting a card skimmer into target Magento, WooCommerce, Shopify, and WordPress sites, the the threat actor is also hijacking targeted domains to deliver the malware to other sites.