SecurityBleepingComputerabout 2 hours ago
Hackers hijack Convertr script to steal data
2 min read
A Brazilian gang compromised Convertr analytics script on October 24 to steal payment data from R$2 billion in sales. The attackers exploited CVE-2026-8467 to inject code stealing card numbers and CVVs. Convertr removed the skimmer and upgraded Plausible by October 26, but cached scripts may remain active for 24 hours.
Level
Hype check
Tap to vote and see what everyone thinks.
