Hackers Use Google Analytics to Steal Credit Cards

It's not a vulnerability in Google Analytics itself, more so the fact the browsers implicitly trust the GA hostname.