Some of the information I had posted about 2 weeks earlier -- so they are behind the curve on this one.
I am not sure who 'Krebsonsecurity' is...
I was hit by this two months ago. My bank recognized it, did not process it and put a hold on my card for any merchant transactions until they could contact me.
I of course, did not approve the transaction. Had my card cancelled and ordered a new one.
I cannot be certain but this happened about 6 hours after I made a purchase online at Amazon.com through a vendor one their market place. Since then, I changed my account information, removed my card from storage on their servers and purchase an Amazon gift card when purchasing through their site.
I have read the horror stories people have had with these transactions. Got to keep your cards safe.