An e-commerce credit-card skimmer is being used by a second skimmer to steal payment data – and both are on Costway's website.