Double-dipping scammers don't need Magecart to grab card numbers and turn a profit, report says

According to Gemini Advisory, a China-based e-commerce scam appears to be harvesting payment data not through direct hacks or using malware to skim data, but with hundreds of fraudulent online shops.