From Fox News · Kurt Knutsson, CyberGuy Report · · 1m 30s
119,000 fake shops steal credit card details
AI-powered fake shops mimic brands to steal payment info.
In brief
AI-powered fake shops mimic brands to steal payment info. 119,000 fake DoppelCart stores impersonate brands to capture credit card details and bank verification codes. Originally reported by Fox News.
Fake shopping sites
Nebty found 119,000 fake stores impersonating brands.
“CyberGuy says fake stores copy product catalogs and branding”
How they work
Sites use .shop domains and steal payment details at checkout.
“DoppelCart steals card numbers, expiration dates, security codes”
Why they look real
Scammers copy real company pages and branding directly.
“DoppelCart mimics 44,182 brands with two clones per brand”
The discount trap
65% discounts lure shoppers into fake stores.
“CyberGuy warns about extreme discounts from unfamiliar retailers”
Bank code theft
One-time bank verification codes can be captured.
“Attackers use bank verification codes to bypass transaction protections”
Real companies affected
Legitimate businesses get complaints about fake orders.
“Nebty says legitimate businesses get angry customers from fake orders”
How to spot scams
Check web address, research retailers, use credit cards.
“CyberGuy says check the domain before entering payment details”
What to do next
Report fraud to FTC and change passwords.
“The FTC recommends contacting your financial institution immediately”
Why it matters
DoppelCart steals payment details and bank verification codes.
“DoppelCart captures card numbers, expiration dates, security codes”
The scale
2.72% of .shop domains are fake DoppelCart stores.
“Nebty says 118,787 .shop domains are fake DoppelCart stores”
How they steal
Checkout pages send data to command-and-control servers.
“DoppelCart sends payment details through websockets to attackers”
Real impact
Scammers target real companies with fake orders.
“Legitimate businesses get angry customers from fake orders”
The warning
Check web address and research retailers before paying.
“CyberGuy says check the domain and search for the retailer”
What happens next
Report fraud to FTC and change passwords.
“The FTC recommends contacting your financial institution immediately”
The risk
One-time bank codes can be used for fraudulent transactions.
“Attackers use bank verification codes to bypass transaction protections”
The solution
Use strong security software and transaction alerts.
“CyberGuy recommends strong antivirus software and transaction alerts”
The bottom line
119,000 fake DoppelCart stores impersonate brands to capture credit card details and bank verification codes.
