According to BleepingComputer, Element Vape, a major online vendor of e-cigarettes and vaping kits is serving a credit card skimmer on its live site, presumably after being hacked.
The company sells e-cigarettes, vaping equipment, e-liquids and CBD products and has significant presence across the US and Canada.
Element Vape’s website is hosting a malicious JavaScript file from a third party website, appearing to contain a credit card skimmer.
It is currently unknown how long the file has been on the site.