Hackers hijack Convertr analytics script for payment card skimming

Wed, 28 Oct 2026 17:09:30 +0000

Engineer — Plan: If you load third-party analytics scripts at checkout, audit your CSP and subresource integrity (SRI) settings; inventory any Convertr script dependencies and verify their current integrity hashes.
SOC/IR — Plan: Build or tune a detection for unexpected script mutations or new external script loads on checkout pages; hunt for anomalous POST requests to unfamiliar domains from e-commerce endpoints.
Leader — Learn: Third-party script supply-chain skimming is a recurring risk vector for e-commerce; useful framing for vendor risk discussions, but no immediate leadership action is indicated without confirmation of organizational exposure.

Skimming on CuraSec