It started with a phone call: "Our marketing team is reporting successful orders, but our payment gateway shows zero transactions."

The checkout looked perfect. The logs showed nothing. Yet, transactions were vanishing into thin air.

This talk is a technical post-mortem of a Magecart-style checkout hijacking. I’ll walk you through the "Live Fire" incident response and how it could have been avoided.