Lots of people know to check ATMs and gas station credit card readers for skimmers ... hackers put Magecart JavaScript code into the EXIF metadata of image files, which is then loaded and executed ...