Sesame Street Live among sites hit by credit card skimming attacks, researcher says. Attackers injected malicious JavaScript into payment function for Sesame Live online store to skim credit card data. About 6,600 payment sites use Volusion payment platform, according to researcher Marcel Afrahim. It’s not clear who is behind these attacks, but the use of malicious JavaScript is the hallmark of Magecart, an umbrella group of groups that have been attacking e-commerce sites of several major companies over the last 18 months.”]
Source: https://www.govinfosecurity.com/volusion-payment-platform-sites-hit-by-attackers-a-13229