Fraud network uses 4,700 fake shopping sites to steal credit cards

A financially motivated actor called SilkSpecter has been operating since October 2024, deploying approximately 4,695 fraudulent e-commerce domains impersonating major brands to phish U.S. and European shoppers for credit/debit card numbers and phone numbers; the operation uses legitimate payment processors (Stripe), tracking pixels, automated localization, and nonstandard TLDs to increase credibility and exfiltrate payment data for fraud and follow-on phishing.