Hackers hide credit card stealer in pixel-sized SVG on nearly 100 online stores

Hackers are using a pixel-sized SVG image to hide credit card-stealing code on nearly 100 online stores. The malware is injected as a 1x1-pixel SVG element with an onload handler containing the encoded skimmer payload. This technique avoids external script references, making it harder to detect. The campaign likely exploits the PolyShell vulnerability. Adobe has not yet released a production fix for this flaw.