Security researchers have identified a large-scale fraud campaign, designated DoppelCart, utilizing more than 119,000 domains to host counterfeit e-commerce sites. The operation targets shoppers globally by mimicking legitimate retailers, capturing credit card details and personally identifiable information during checkout, and exfiltrating the data to actor-controlled servers.

What should defenders do?

Security researchers and analysts recommend the following mitigation measures: block known DoppelCart domains at the network perimeter; use browser extensions or security tools designed to detect and warn against fake e-commerce sites; verify retailer legitimacy by checking official websites and domain registration details; avoid entering payment information on sites offering prices significantly below market rate; and enable multi-factor authentication on financial accounts to mitigate the impact of potential card compromise.

highCyber Attacks

DoppelCart Fraud Network Exploits 119,000 Fake Shops to Steal Credit Card Data

Global operation mimics legitimate retailers to capture payment information at scale

CyberIntel DeskPublished 21 days agoUpdated less than a minute ago1 min read

DoppelCart Fraud Network Exploits 119,000 Fake Shops to Steal Credit Card Data

Key Takeaways

DoppelCart utilizes a network of over 119,000 fake e-shop domains to facilitate credit card theft.
The operation has been active since at least 2024 and was reported in September 2026.
No patch or technical fix is available; the attack vector relies on fake websites and social engineering.
Victims risk financial theft and identity fraud by entering payment data on counterfeit sites.

Related Security News

highCyber Attacks

Former US Air Force Members Sentenced to Prison for Business Email Compromise Scams

Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. The sentencing, reported by BleepingComputer in September 2026, concluded a federal case targeting individuals who abused their military backgrounds to conduct financially motivated email fraud. The attacks spanned multiple years prior to sentencing, though specific victim counts and total financial losses were not detailed in the reporting. The case underscores the legal consequences of using military credentials and training for cyber-enabled fraud.

BleepingComputerabout 5 hours ago1 min read