Hackers abused Stripe and Google Tag Manager to launch a credit card theft campaign and host stolen payment details

Hands holding a credit card and mobile phone.

• Attackers abuse Stripe API via Google Tag Manager
• Malware skims checkout data from compromised Magento sites
• Stolen card details exfiltrated through api.stripe.com

Cybercriminals have turned Stripe into a malware hosting platform, in a new attack that steals people’s payment information from online shoppers. This is according to cybersecurity researchers Sansec, who discovered the campaign earlier this week.