Hackers Use Google Tag Manager To Steal Credit Card Numbers

Reference: Visit website

Once the malware was active it would record credit card information from a Magento ecommerce checkout page and send it to an external server controlled by a hacker.

Sucuri security researchers also discovered a backdoor PHP file. PHP files are the ⁘building blocks⁘ of many dynamic websites built on platforms like Magento, WordPress, Drupal, and Joomla. Thus, a malware PHP file, once injected, can operate within the content management system.

VirusTotal.com is a crowdsourced security service that provides free file scanning and acts as an aggregator of information.