Cybercrime gang adds new tactics to credit card data-stealing campaign