Formjacking or Web Skimming are types of attacks where hackers inject malicious JavaScript code into a webpage form (typically in a payment page form) via a 3rd party object on the site. When a user inputs his/her credit card information and hits submit, that malicious code collects the payment card number and other information like the customer’s name, address, and phone number, then sends this information to the attacker's location instead of the original payment processing system.