e-skimming

Stealing payment card data by adding a malicious script to a website's checkout page, which copies each card number as it is typed while the page keeps working normally. A typical sign is a script the shop never added, such as a fake `jquery.min.js` loaded from a lookalike domain.