Many online stores are being hit by this old vulnerability

Hackers are taking over online stores and stealing customers’ payment card data by exploiting a three-year-old vulnerability in a Magento plugin according to the FBI.

This kind of attack is known as web skimming or Magecart and in October of last year, the FBI issued a similar warning about an increase in these types of attacks.

Source Article