A payment card-skimming malware that hides inside social-media buttons is making the rounds. Cyberattackers are gaining access to websites code, and placing the fake buttons on checkout and e-commerce pages. The malware behaves just like the widespread Magecart group of skimmers, with the code being run by a shopper s PC in order to harvest payment cards and other information entered into online fields. The attackers also took great pains to make the code itself for the buttons look as normal and harmless as possible.
Source: https://threatpost.com/online-shopping-malware-social-media-buttons/161903/