Experts at Sucuri have uncovered a credit card skimmer embedded within Google Tag Manager on Magento-powered ecommerce sites. Cybercriminals exploited this tool to stealthily steal payment information from unsuspecting customers. The attackers intricately hid the malware within the GTM, making detection challenging. At least six websites fell victim to this attack, highlighting a concerning trend in online security threats. Website administrators are advised to remove any suspicious GTM tags, conduct thorough scans, update platforms and extensions, and monitor site activity vigilantly to prevent such breaches. This incident underscores the ongoing risks faced by popular platforms like Magento and the importance of robust security measures in safeguarding sensitive data.