Web skimming is a cyberattack that steals credit card data during a checkout. Researchers have identified an ongoing campaign targeting major payment providers—and, by extension, consumers.