Hackers hide credit card stealing scripts in favicon EXIF data

An online store using the WordPress WooCommerce plugin was found to be infected with a Magecart script that was stored in the EXIF data for a remote site's favicon image.