Gal Meiri is a senior security researcher with vast research experience in the fields of client-side threats and browser capabilities. Gal leads the Akamai Client-Side Protection & Compliance Threat Research team. As a researcher, Gal investigates various client-side threats among web skimmers and Magecart attacks. In the past, Gal specialized in client-side user and device fingerprinting and bot detection.

A new skimmer attack was discovered this week, targeting various online e-commerce sites built with different frameworks. As I write this blog post, the attack is still active and exfiltrating data.

\r\n

\r\n Attackers are exploiting an expanding in-browser attack surface and continually evolving web skimming techniques.  This attack implements many sophisticated capabilities, which we don't usually see among skimmers attacks.

\r\n Online stores are increasingly outsourcing their payment processes to third-party vendors,  which means that they don't handle credit card data inside their…