Hackers hijack Convertr analytics script for payment card skimming

# Hackers hijack Convertr analytics script for payment card skimming

https://gcdradar.vercel.app/incidents/hackers-hijack-convertr-analytics-script-for-payment-card-sk · AIR-2026-1603 · closed 2026-11-10

- Lane: Supply chain
- Severity: 3 (Confirmed exploitation): Confirmed real-world malicious script injection affecting e-commerce checkouts.
- Fix status: No fix needed
- First reported: 2026-10-27
- AI role: No AI role
- Products: Convertr analytics script

## Summary

A credit card skimming group compromised a shared analytics script used by e-commerce platform Convertr. Attackers used the compromised script to steal shoppers' payment card data during checkout.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Affected and fixed versions

- Affected: Convertr analytics script

## Latest updates

- 2026-10-27: Hackers hijack Convertr analytics script to steal payment card data (https://bleepingcomputer.com/news/security/hackers-hijack-convertr-analytics-script-to-steal-payment-card-data)

## Sources

- 2026-10-27 BleepingComputer: Hackers hijack Convertr analytics script to steal payment card data https://bleepingcomputer.com/news/security/hackers-hijack-convertr-analytics-script-to-steal-payment-card-data

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.