Active Magecart Campaign Targets Spain, Steals Card Data via Hijacked eStores for Bank Fraud  A large-scale Magecart campaign operated for over 24 months using a resilient infrastructure of 100+ domains to deliver multi-stage JavaScript loaders that dynamically fetched skimmers and exfiltrated card data via WebSocket. The attackers used high-fidelity payment page mimicry (notably Redsys) and checkout hijacking to embed fraud into legitimate transaction flows, shifting...

A Magecart campaign targeting Spain operated for over 24 months, hijacking 17 WooCommerce eStores with 100+ domains to steal card data via WebSocket and Redsys payment page mimicry. #MagecartAttack #PaymentFraud #Spain