The malicious GTM tag contains an encoded JavaScript payload that acts as a credit card skimmer. “This script was designed to collect sensitive data entered by users during the checkout process ...

To remediate the attack, website admins should remove any suspicious GTM tags, perform a full website scan, make sure both Magento and other extensions are updated, and regularly monitor site ...

Google announced plans to update how Google Tag Manager (GTM) interacts with Google Ads to streamline data collection and improve tracking reliability. This change is scheduled for April 10.