Major Magecart skimming attack hits 8 local US government sites