Web skimming attacks secretly steal card data at checkout using malicious JavaScript tied to major payment networks.