Magento 2 Skimmer Uses getCredentialStorage
A PHP skimmer injected into a Magento 2 core file and used to steal login data from HTTP requests.
Magento 2 PHP Skimmer 0x3C Captures Customer Data To Image File
A PHP skimmer injected into a Magento 2 core file that captures POST data on the cart checkout page and saves the stolen data to an image file on the hosting server.
Magento PHP Injection Loads JS Skimmer
A JavaScript skimmer that conditionally loads from malicious PHP code injected into a Magento file.
Magento JS Skimmer Hidden in CSS Request to Malicious Domain
It’s important to an attacker for a skimmer to remain undetected for as long as possible, so they do research and use various techniques to make the request that loads the skimmer look innocuous.