Researchers say attackers are embedding malicious code in poorly configured Magento sites that hides stolen payment card data in images.
Source: Threadpost