GitHub hosted Magecart skimmer used against hundreds of e-commerce sites

Magecart threat actors upload their skimming code onto GitHub in latest attack against Magento websites. The latest skimmer is a hex-encoded piece of JavaScript code that was uploaded to GitHub on April 20 by user momo33333. There are currently over 200 sites that have been injected with this skimmer: According to a search on.URLscan.io, there are currently. over 200. sites that are infected with this. script. The exfiltration domain (jquerylol[.]ru) where the stolen data will be sent to: JQuerylol.com.”]

Source: https://blog.malwarebytes.com/cybercrime/2019/04/github-hosted-magecart-skimmer-used-against-hundreds-of-e-commerce-sites/