DoppelCart: Over 119,000 Fake E-Shops Targeting Shoppers

Researchers from German cybersecurity firm Nebty have uncovered a massive network named 'DoppelCart' consisting of over 119,000 fake online stores designed to steal credit card information. The operation primarily uses .shop domains, accounting for 2.72% of that TLD's total. These fraudulent sites impersonate more than 44,000 legitimate brands, with some brands like SodaStream and Daniel Wellington having over 30 clones each. The fake shops employ tactics such as advertising steep discounts of up to 65% to lure unsuspecting shoppers. Payment information is collected via fraudulent checkout pages that transmit data in real-time to attacker-controlled servers. As of the latest reports, over 105,000 of these fake shops remain active. Nebty has created a searchable database to help brands identify impersonations and protect themselves.

Key Points: • DoppelCart consists of over 119,000 fake e-commerce domains. • The network targets over 44,000 legitimate brands, with some brands heavily cloned. • Fraudulent checkout pages collect sensitive payment information in real-time.