LATEST THREAT INTEL: SATORI - Phish ’n’ Ships Fakes Online Shops to Steal Cash & Card Data – CYBERInsights Small Business Cybersecurity News

Helping Keep Small Business CYBERSafe!
Gibraltar: Tuesday 5 November 2024 at 14:04 CET

CYBER THREAT INTEL: SATORI – Phish ’n’ Ships Fakes Online Shops to Steal Money and Credit Card Information
By: Iain Fraser – Cybersecurity Journalist
CYBERInsights – First for SME Cybersecurity News
#CyberInsights #CyberSecurity #CyberMedia #CyberPR #CyberAwareness
#SME #SmallBusiness #smallbusinessowner #Phishing

The Satori Threat Intelligence and Research team at HUMAN recently uncovered and disrupted a vast fraud scheme, named “Phish ’n’ Ships,” involving fake online stores designed to exploit digital payment platforms, stealing consumers’ money and credit card information. This operation consists of hundreds of fraudulent web shops promoting popular items to attract potential buyers.

The perpetrators, whose internal tools were found to be in Simplified Chinese, used a malicious payload to infect legitimate websites, creating fake product listings that rank high in search engine results. When unsuspecting consumers click on these listings, they are redirected to a site controlled by the threat actors. There, one of four specific third-party payment processors gathers credit card information and completes a “purchase”—but the buyer never receives the item.

According to Satori researchers, this scheme, which dates back to 2019, has had a widespread impact. The threat actors infected over 1,000 websites to create and promote fake product listings and developed 121 fraudulent web stores to deceive consumers. Researchers estimate that, over the past five years, this operation has caused losses in the tens of millions of dollars and affected hundreds of thousands of consumers.

CYBER Insights – Helping Keep Small Business CYBERSafe!

Launched in 2020 by Cybersecurity Journalist Iain Fraser and his team at IfOnly… CYBERInsights was developed to be the go-to platform providing definitive, reliable & actionable Cybersecurity News, Intel, Awareness & Training specifically written and curated for Small Business & Enterprise Owners, Partners and Directors throughout the UK. #CyberInsights #CyberSecurity #CyberMedia #CyberPR #CyberAwareness #SME #SmallBusiness #smallbusinessowner

What is a VPN & Does my SME Need one? A VPN is a Virtual Private Network a method of securing your communications credentials. When it comes to Small and Medium-sized enterprises (SMEs), the choice of VPNs can significantly impact the security and efficiency of their operations.

The NordVPN service allows you to connect to 5600+ servers in 60+ countries. It secures your Internet data with military-grade encryption, ensures your web activity remains private and helps bypass geographic content restrictions online. Join NordVPN Today and Save up to 73% and Get 3 months Extra Free Rude Not to …!