Researchers found Disgrasya downloaded 37,217 times, targeting WooCommerce with carding scripts that steal payment data.