The online shop for the Atlanta Hawks professional NBA basketball team had malicious code injected into it that allowed attackers to steal customer's credit card information.
This type of attack is called a MageCart infection and is when attackers compromise an ecommerce site to inject JavaScript into the checkout or cart pages. This script then steals credit card and address information entered into these pages and sends it off to a remote server for the attackers to collect.
According to Sanguine Security, a MageCart script was
detected on April 20th on the checkout page for the Atlanta Hawks' online shop as shown below.
... ...
