Security outfit RiskIQ says it has found a new variant of the cyber-crime syndicate Magecart which is has named MakeFrame due to the fact that it creates iframes for skimming payment data from websites.