Hackers are collecting payment details, user passwords from 4,600 sites

Same hacker group compromises Alpaca Forms and Picreel to deploy malicious code to thousands of sites.