Hijacked checkout script puts Brazilian shoppers’ card data at risk
Attackers compromised a shared analytics script loaded by checkout pages on stores using the Brazilian e-commerce platform Convertr. Malicious code inserted into the legitimate tracker collected payment information as shoppers completed purchases. The suspected initial vulnerability has not been…