Google Tag Manager Skimmer Steals Credit Card Info From Magento Site

The malicious code was found in the database table cms_block.content and was disguised as a standard Google Tag Manager and Google Analytics tracking script. It contained an encoded JavaScript payload designed to collect user data during checkout.