CROOKS USE GOOGLE TAG MANAGER SKIMMER TO STEAL CREDIT CARD DATA FROM A MAGENTO-BASED E-STORES

Summary from the TLDR InfoSec newsletter

Threat actors are using Google Tag Manager (GTM) to install credit card skimmer malware on Magento-based e-stores, according to Sucuri researchers. The malware hides in a website's database and steals credit card information entered during the checkout process, sending it to the attackers' server. This sophisticated attack demonstrates how criminals are using legitimate platforms like GTM to deploy malicious code that is difficult to detect.