Several retailers have gained ground on Target's mobile app in recent years, but the bullseye brand has quietly rolled out several helpful features.

Magecart hides payload in favicon EXIF via third-party scripts, bypassing static analysis and stealing checkout data at runtime.