Magecart Campaign — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
April 9, 2026
Last Seen
June 5, 2026

Magecart Campaign is a threat campaign tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed April 9, 2026; most recent activity June 5, 2026.

Related Threat Clusters

  • Magecart Campaign Targets 99 Magento Stores with SVG Skimmer

    A large-scale Magecart campaign has compromised 99 Magento e-commerce stores, utilizing an innovative evasion technique involving invisible SVG elements to inject credit card skimmers directly into checkout pages.…

    2 articles · Updated April 10, 2026
  • Magecart Campaign Exploits Stripe for Credit Card Theft

    A new Magecart campaign is leveraging Stripe's API to host a JavaScript skimmer that captures credit card information during online transactions. The attack utilizes Google Tag Manager to inject the malicious code into…

    3 articles · Updated June 5, 2026

Recent Intelligence Reports

  • New Magecart Attack Abuses Stripe as Malware C2 — Gbhackers · June 5, 2026
  • Hackers Use SVG Onload Trick to Hide Magecart Skimmer on Magento Checkout Pages — Cybersecuritynews · April 10, 2026
  • Attackers Deploy Hidden Magecart Skimmer on Magento Using SVG onload Abuse — Gbhackers · April 9, 2026

CVSS v3.1 Breakdown