Canada Computers checkout page reportedly served card skimming script
Source: Canada Computers
A Reddit user says a card skimmer was injected into the Canada Computers online store checkout flow. According to the post, a Magecart-style script that collected payment and billing details entered on the page and sent the data to an external domain.
The user said the script was obfuscated and loaded from CodePen through a disguised Google Analytics tag. The post also claims the loader only ran on the payment step, then removed itself and cleared the browser console after loading.
Source: Reddit
According to the timeline shared on Reddit, the user spotted the activity on January 18 while buying an item with browser developer tools open. An update posted on January 22 at 4:54 PM EST says the skimmer no longer appeared on the live checkout page, and the user pointed to archived snapshots as proof the code was present earlier.
Canada Computers has not replied to the user’s support tickets, the post claims, and no public notice was mentioned in the thread at the time of writing. We attempted to reach Canada Computers for comment, but the retailer’s site did not load from our end, so we could not request a statement through the usual channel.
Several commenters also reported suspicious or unauthorized transactions after recent purchases. If you made purchases through this store, check recent transactions and contact your bank if necessary.
Source: Reddit
