Hackers Exploiting Trusted Google Domains to Inject Malicious Scripts

New malvertising scam hijacks legit e-commerce sites via Google API JSONP calls, turning them into phishing pages without owners knowing.