This new skimming/phishing hybrid threat tactic means that even stores that send customers to external payment processors are vulnerable.
Source: Threadpost