A credit card skimmer is designed to steal and exfiltrate customers’ payment and personal info. The attackers use this script to download and inject fake payment forms on checkout pages displayed to customers by the hacked online shop. The Golang-based malware, spotted by Dutch cyber-security company Sansec on the same server, was downloaded and executed on breached servers as a linux_avp executable. Until now, this backdoor remains undetected by anti-malware engines on VirusTotal even though a sample was first uploaded more than one month ago.”]