Magecart splinter group known for supply-chain attacks appears to be tied to advanced threat actors. Researchers at Malwarebytes have linked Magecart Group 5 to Dridex phishing campaigns and the infamous Carbanak group. Magecart 5 specifically targets e-commerce merchants; in the Ticketmaster attack for instance, it targeted a chat feature hosted by a third party. It s a bang-for-the-buck strategy that potentially gives it access to hundreds or even thousands of websites downstream.
Source: https://threatpost.com/magecart-5-linked-carbanak-gang/149419/