Story perspectives

Web Skimming Threat: Protect Yourself from Payment Fraud

1/23/2026

38 3

Summary

Story summary

Researchers are tracking a web skimming campaign linked to major payment networks.
The campaign uses Magecart, with criminals injecting malicious JavaScript into checkout pages to steal payment details as shoppers enter them.
The attacks are hard to detect because of obfuscation and bulletproof hosting.
Shoppers, merchants, and payment providers are affected.
Shoppers are advised to use virtual or single-use cards, enable transaction alerts, and monitor account activity regularly.

1 of 1

Story summary

Researchers are tracking a web skimming campaign linked to major payment networks.
The campaign uses Magecart, with criminals injecting malicious JavaScript into checkout pages to steal payment details as shoppers enter them.
The attacks are hard to detect because of obfuscation and bulletproof hosting.
Shoppers, merchants, and payment providers are affected.
Shoppers are advised to use virtual or single-use cards, enable transaction alerts, and monitor account activity regularly.