Hackers hijack Convertr analytics script to steal payment card data

A credit card skimming group has compromised a shared analytics script used by the e-commerce platform Convertr. This allowed attackers to harvest shoppers’ payment card details during checkout, highlighting the ongoing risks associated with third-party JavaScript supply chain vulnerabilities.