Card skimmers hijack Convertr analytics script to steal payment data

A credit card skimming group compromised Convertr's shared analytics script, injecting malicious code to capture payment card details during checkout on e-commerce sites. The attack leverages a trusted third-party script, affecting multiple merchants using the platform. Scope and number of affected sites remain unclear, but supply-chain style compromise of analytics scripts is a growing vector for payment fraud.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works