From vulnerability management end what are the steps to be taken to mitigate the PIPKA skimmer attack ?