Brazilian skimmer gang hijacks Plausible analytics script on Convertr checkouts
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A Brazilian card-skimming gang reportedly hijacked a shared analytics script (a Plausible tracker) hosted by e-commerce platform Convertr, injecting code that stole card numbers, CVVs, names, and CPF tax IDs from checkouts on merchant sites from October 24.