1,000+ web shops infected by “Phish ‘n Ships” criminals who create fake product listings for in-demand products

**Phish ‘n Ships** is a large-scale fraud campaign in which attackers infected legitimate web shops with malicious payloads that redirect visitors to attacker-controlled fake stores; they used SEO poisoning and fake product listings to harvest payment card data and fake purchases, impacting over 1,000 sites and causing tens of millions in estimated losses while researchers have partially disrupted the operation.