Web skimming with Google Analytics

Attackers injected malicious code into sites, which collected all the data entered by users, and then sent it via Google Analytics to access the stolen data in their Google Analytics account.