Popular ecommerce sites have been infected with web-based keyloggers that are being used to steal credit card data as it’s entered into online checkout forms.

Zscaler identified a keylogger on steroids that targets passwords, webcam and software licenses.