A credit card skimmer was discovered on the OlympicTickets2020 website. The code was embedded in an existing piece of JavaScript that was used to hide the malicious code. The original code was left untouched, and the skimmer function would be executed the moment the rest of the JavaScript was loaded. The structure of the loader is, aside from the random variable names and script content, exactly the same. The skimmers are generally obfuscated to make it harder for detection mechanisms to detect the code. In this case, the library was hosted on the targeted site itself.”]
Source: https://maxkersten.nl/2020/01/20/ticket-resellers-infected-with-a-credit-card-skimmer/