Magecart Skimmer Hijacks Stripe as Hidden Command‑and‑Control Server
Security researchers discovered a Magecart skimmer that stores malicious code in a Stripe customer's metadata and executes it via Google Tag Manager on checkout pages. The stolen card data is exfiltrated back to the attacker’s Stripe account as fake customers, letting the fraud blend into trusted traffic and bypass CSPs.