“BleepingComputer has confirmed Element Vape, a prominent online seller of e-cigarettes and vaping kits is serving a credit card skimmer on its live site, likely after getting hacked. With its presence across the U.S. and Canada, Element Vape sells e-cigarettes, vaping devices, e-liquids, and CBD products in both retail outlets and on their online store.
Element Vape’s website is loading a malicious JavaScript file from a third-party website that appears to contain a credit card stealer. Our analysis of ElementVape.com on Wayback Machine indicates the above code was absent as of February 5th 2022 and before. Therefore, the infection appears to be more recent, occurring sometime after the date and before getting discovered today.
If you have recently made any purchases on the website, make sure to check your credit card transactions for any suspicious activity”
Warning: Popular e-cigarette store hacked to steal credit cards