Came here to post this same thing. A CSP would have stopped this attack. The exfil server was baways[.]com. Ticketmaster, on the other hand, did have a 3rd pa

Came here to post this same thing. A CSP would have stopped this attack. The exfil server was baways[.]com. Ticketmaster, on the other hand, did have a 3rd party JS that was compromised: https://www.riskiq.com/blog/external-threat-management/magecart-ticketmaster-breach/ https://www.riskiq.com/blog/external-threat-management/magec...