Nearly a thousand e-commerce sites infected with evasive JavaScript loader

A long-running campaign has infected nearly a thousand online stores, primarily running on Magento, with a malicious JavaScript loader. Threat actors inject hidden code through CMS blocks to intercept user data, utilizing advanced techniques to bypass security scanners.