Threats Actors Registering Fake Shopping Domains to Attack Users in this Holiday Season

The report details a large-scale, financially motivated campaign of over 200 fraudulent online retail domains impersonating major brands during holiday shopping events; actors leverage automated site generation, privacy-protected WHOIS, shared hosting/AS clustering, social-media lures, identical JavaScript and checkout patterns to harvest credit card data and distribute malware, posing significant consumer financial and identity-theft risk.