[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvGO9E7DoT9fFu0kwP97KrX4N9FfT1U6d6e2k95_4XDY":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"467d7f31-b426-4220-87d2-8424b7d15528","DoppelCart fraud network uses 119,000 fake shops to steal credit cards","doppelcart-fraud-network-uses-119-000-fake-shops-to-steal-credit-cards-44a5bf","A massive operation dubbed \"DoppelCart\" uses more than 119,000 domains to run a network of fake e-shops that steal payment card details. [...]","A massive operation named DoppelCart has been discovered, utilizing over 119,000 fake e-commerce domains, primarily in the .SHOP TLD, to steal credit card details. These sites impersonate legitimate brands with significant discounts to lure victims, collecting sensitive payment information and even one-time bank confirmation codes.","DoppelCart fraud network uses 119,000 fake shops to steal credit cards.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fdoppelcart-fraud-network-uses-119-000-fake-shops-to-steal-credit-cards\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2023\u002F10\u002F09\u002Fmagecart.jpg","2026-09-08T20:35:14+00:00","2026-09-08T22:00:24.719569+00:00",8,[17,20,22,25],{"name":18,"type":19},"DoppelCart","campaign",{"name":21,"type":19},"BogusBazaar",{"name":23,"type":24},"Nebty","vendor",{"name":26,"type":27},"Magento","product","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":28,"icon":30,"name":31,"slug":32},null,"Threat Intelligence","threat-intelligence",[34,39,44],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":45},{"id":28,"icon":30,"name":31,"slug":32},[],[23,26],{"controls":49,"vendors":134},[50,78,105],{"slug":32,"name":51,"problem":52,"products":53},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"slug":79,"name":80,"problem":81,"products":82},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-swg","Netskope Secure Web Gateway","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fnext-gen-swg","Cloud secure web gateway with inspection of web and cloud app traffic.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-internet-access","Zscaler Internet Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-internet-access","Cloud secure web gateway with DNS security, inspection and data protection.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":100,"product_name":101,"url":103,"description":104},"dnsfilter","DNSFilter","\u002Fvendor-logos\u002Fdnsfilter.png","https:\u002F\u002Fwww.dnsfilter.com\u002F","DNS filtering for offices and roaming devices.",{"slug":106,"name":107,"problem":108,"products":109},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-email","Darktrace \u002F EMAIL","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Femail","Email security that flags messages deviating from normal communication patterns.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",[],{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":150},"doppelcarts-119000-fake-shops-highlight-consumer-fraud-risks","DoppelCart's 119,000 Fake Shops Highlight Consumer Fraud Risks","The DoppelCart operation demonstrates how threat actors can deploy massive, automated fraud infrastructure to impersonate legitimate brands and harvest payment card data at scale. Victims are lured by unrealistically deep discounts and convincing brand imitation, leading them to willingly submit credit card numbers and even one-time authentication codes. This matters because once OTP codes are captured, even multi-factor authentication protections tied to payment accounts are effectively bypassed. The sheer volume of 119,000 domains illustrates how low the barrier to entry has become for large-scale phishing and fraud campaigns. Organizations and consumers alike must treat unfamiliar e-commerce sites — especially those on lesser-known TLDs like .SHOP — with heightened scrutiny.",[140,141,142,143,144,145,146,147,148,149],"CIS Control 9 – Email and Web Browser Protections","CIS Control 14 – Security Awareness and Skills Training","CIS Control 17 – Incident Response Management","NIST SP 800-53 SI-8 – Spam Protection","NIST SP 800-53 AT-2 – Literacy Training and Awareness","NIST SP 800-53 SC-7 – Boundary Protection","GDPR Article 32 – Security of Processing (for merchants handling payment data)","PCI DSS Requirement 6.4 – Protection of Public-Facing Web Applications","PCI DSS Requirement 12.6 – Security Awareness Program","NIST CSF PR.AT-1 – Awareness and Training",{}]