A Brazilian card-skimming gang edited one shared Plausible analytics file and turned it into a Convertr checkout skimmer that ran on every merchant's payment page. If your checkout loads scripts from a server you don't control, list them today and find out who patches that server.
