A campaign discovered by Malwarebytes Labs in mid-April has lifted credentials from a number of e-commerce portals.
Source: Threadpost