Affiliate Referral Abuse & JavaScript Injection

Hackers use JavaScript injections to redirect visitors to specific websites to collect affiliate referrals.
Prestashop StripeTag Skimmer

A basic JavaScript skimmer injected into a Prestashop website. Exfiltration domain: …
Skimmer Targets Psigate Payment Fields

Analysis of an obfuscated JavaScript skimmer designed to steal payment data entered into the Psigate gateway fields on the victim’s infected ecommerce website. Exfiltration domain: …
Mass WP Infection: trainresistor.cc

A large attack campaign that has been targeting vulnerable WordPress websites and using JavaScript injections to redirect victims to scams or malicious URLs.
.wtf() Skimmer Still Targeting WooCommerce Websites

Almost identical to the one from back in March 2021 except this uses convert-server.com as the exfiltration domain.