Hackers hijack Convertr analytics script to steal payment card data

A credit-card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout, BleepingComputer reports. According to Sansec research summarised by Risky Business, a suspected Brazilian group active since 2024 and specialised in Magecart-style attacks breached the company, apparently via the Plausible open-source analytics platform, and deployed the skimmer through its analytics script.