New Magecart Attack Inject Malicious JavaScript to Skim Payment Data

Cybersecuritynews •Tushar Subhra Dutta • January 21, 2026

A new Magecart-style campaign has emerged, targeting online shoppers through malicious JavaScript code designed to steal payment information directly from ecommerce websites. The attack works by injecting hidden scripts into compromised shopping sites, allowing attackers to intercept sensitive data when customers enter their credit card details during checkout. Magecart attacks represent a significant threat to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Magecart Attack Targets E-commerce with Malicious JavaScript A new Magecart-style attack is targeting e-commerce websites by injecting malicious JavaScript designed to steal payment information during checkout. The attack uses obfuscated code hosted at cc-analytics[.]com/app.js to intercept sensitive data entered by customers. Online shoppers are at risk as this campaign compromises the security of their payment details. 2 sources 20

New Magecart Attack Inject Malicious JavaScript to Skim Payment Data

The full story

Extracted Entities

Attack Types (1)

Malware (1)