WHEN GTM ISN’T GTM: MAGECART’S TWO-STAGE TRICK A recent Magecart campaign cleverly hid in plain sight by disguising itself as part of a trusted tool — the Google Tag Manager (GTM). What makes this attack unique is how it breaks up the malicious activity into two parts to avoid detection. First, the attacker injects a The post When GTM isn’t GTM: magecart’s two-stage trick appeared first on Source Defense.