The Magecart credit card skimmer found on the website of retailer Claire’s Accessories was likely put there by the Lazarus or Hidden Cobra North Korean APT group, reports Sansec
https://www.computerweekly.com/news/252485702/North-Korea-behind-spate-of-Magecart-attacks