Category: Magento / Adobe Commerce

Chargebacks & Fraud

A Skimmer Hidden in Google Tag Manager Used Stripe’s Own API to Store Stolen Cards

Sansec documented a Magecart skimmer that loads from real Google Tag Manager containers and stores Magento checkout data as fake Stripe customers. Why a CSP allowlist misses it, what PCI DSS 6.4.3 and 11.6.1 expect, and what to check.

E-commerce 4 Internet Marketers Editorial
Chargebacks & Fraud

Gambit Says AI Agents Hit Custom-Coded Stores and a US Firearms Marketplace

Gambit Security's September 22 interim report says an operator using open-source AI agents built a target list of custom-coded online stores, took more than 600,000 card records from two companies, and hid skimmer loaders in library files, Google tag blocks, and, at a U.S. firearms marketplace, product description fields.

E-commerce 4 Internet Marketers Editorial