Newly discovered web skimming malware is capable of hiding in plain sight to inject payment card skimmer scripts into compromised online stores. The malware’s creators use malicious payloads concealed as social media buttons that mimic high profile platforms such as Facebook, Twitter, and Instagram.
Link: Credit card stealing malware hides in social media sharing icons
via http://www.bleepingcomputer.com