↓ Skip to main content

E-Skimming

Magecart Moved Its C2 On-Chain. PCI DSS 6.4.3 and 11.6.1 Were Built for This

20 July 2026·1118 words·6 mins

Payment Security E-Skimming PCI DSS Detection Engineering Threat Intelligence

Blockchain C2 removes the domain you’d normally report. Why that pushes defense to exactly where PCI DSS 6.4.3 and 11.6.1 already point.

The AppsFlyer SDK Hijack: Why PCI DSS 6.4.3 and 11.6.1 Exist

12 March 2026·1754 words·9 mins

Payment Security Supply Chain Security E-Skimming PCI DSS Third-Party Risk

If the AppsFlyer script loads on your payment pages, you may have been serving malicious code. What the requirements actually ask you to do.