Attackers steal payment information through Google Analytics