Home · Technology · Sep 18 archive
Cybersecurity Firm Links 119,000 Fake Shops to DoppelCart Scam
Developing
In Short: Nebty has linked about 119,000 domains to a fake shopping operation called DoppelCart, which targets customers with convincing imitations of legitimate brands.
Cybersecurity company Nebty has linked approximately 119,000 domains to a fake shopping operation called DoppelCart, according to a report by Fox News. BleepingComputer notes that more than 105,000 of these DoppelCart shops were active in Nebty's latest scans, with the majority still online.
Nebty CEO Benedikt Scheungraber told BleepingComputer that 96% of the confirmed shops shared identical build files and resolved to 27 commerce backends. Researchers found that some fake stores even loaded assets directly from the legitimate company's servers.
The scam involves fake shops advertising discounts as high as 65%, targeting companies such as SodaStream, Velasca, CurrentBody, Daniel Wellington, Dreame, Horze, MOVA, and SPARK PAWS. In some cases, researchers found more than 30 shops apiece targeting a single company.
Kurt 'CyberGuy' Knutsson warns that DoppelCart checkout pages can capture card details and other personal information as shoppers enter it online. Nebty tested several checkout pages and found code collecting personal data, which can be transmitted in real time to command-and-control infrastructure.
Halimah Delaine Prado, Google General Counsel, highlights the rise of AI-powered phishing scams originating from China's 'outsider enterprise.' These criminals use artificial intelligence to create highly convincing fake websites, impersonating trusted brands to defraud hundreds of thousands of Americans, causing millions in losses.
What's still developing
- CyberGuy has a full guide on the warning signs worth checking before buying from an unfamiliar website: Tips to help you tell if an online store is real or a scam.
Sources
- Fox Newslink