logo

Inside a network of 20,000+ fake shops

ID: 70b8affa-302c-50fc-895a-c3d33471a0c8

STIX ID: report--70b8affa-302c-50fc-895a-c3d33471a0c8

Feed Name: Malwarebytes Blog

Threat Score
70/100

Date Published: 2026-03-18

Date Updated: 2026-04-28

...
...

This report details an industrialized fake online shop operation that spun up over 20,000 WordPress/Sellvia storefronts across just 36 IP addresses to harvest payment credentials and personal data; it documents infrastructure clustering (notably 207.244.x.x and 23.105.x.x ranges), provides 36 IP indicators of compromise, describes franchise-style operational tactics and scale, and offers consumer-focused mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.