Magecart hides payload in favicon EXIF via third-party scripts, bypassing static analysis and stealing checkout data at runtime.

Twenty people are now either confirmed or suspected to have the disease. A 21-year-old university student and a sixth form pupil have died in the outbreak.