Vast Network of Fake Web Shops Defrauds 850,000 & Counting

BogusBazaar is a China-based criminal network operating a franchise-style, infrastructure-as-a-service fraud operation that has created tens of thousands of fake webshops (SRLabs observed >75,000 domains, with hundreds of thousands active at points) to steal payment card details and process fraudulent payments (over 1M orders and ~$50M processed since 2021). The group uses expired high-ranking domains, WooCommerce/WordPress plugin customizations, automated site deployment, and payment-page rotation to evade takedowns; victims are mainly in the US and Western Europe. SRLabs disclosed findings to authorities and recommends consumer caution and use of verification services.