Check & card fraudReviewed
Ohey: SuperPixel card skimmer on WooCommerce shops sends stolen card data to metrics-onclick.com
Ohey's Kirk (@KirkDerpca) reported on 1 November 2026 that the SuperPixel skimmer hides in WooCommerce shops' own scripts and sends card data to metrics-onclick.com. Infected shops are victims; Ohey counts 19 sites since 12 October.
- metrics-onclick.com
- Ethereum contract 0x4F3D0C43acdF8308B9258dfC9d8aA45DdF3E1D17 (gives skimmer collection host)
Reported Nov 1, 20261 report