So it looks like one of our sites is targeted by card skimming when you select a payment method a new iframe is loaded which asks the users for their card details.

It quite clever in the fact if you try to load the console it disappears.

Has anyone come across something like this, could you point me in the right direction of where to start fixing the issue.


1 Answer 1


Yes I've come across this before

Check the field Miscellaneous Scripts from


Here scripts will be added before the tag and you can set different scripts per website or even store views.

Check different store scopes. Check for white space before to mask existence.

Once removed don't forget to clear your Magento cache: System > Cache Management > Flush Magento Cache

Also be aware that this could have been inserted via code. Doesnt necessarily mean your admin URL and username password is known.

If not there could be in static block which appears on checkout like in a footer.

  • Yep, found it was in a static block in the footer!
    – WebDevB
    Nov 26, 2019 at 21:56
  • Good work. If you are happy with the answer please mark as correct. Nov 26, 2019 at 23:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.