GoKawiilNebty uncovers DoppelCart, a 119,000-site fake shop network stealing card data
German cybersecurity firm Nebty identified DoppelCart, a fraud operation running over 119,000 fake e-commerce domains, mostly on the .SHOP TLD, with more than 105,000 sites still active. The shops clone 44,182 real brands using copied catalogs and branding, luring shoppers with steep discounts, then harvest card numbers, security codes, and personal details via checkout forms that stream data to attackers in real time.