← Back to feed
AI SecurityEmerging1 sourceSep 9, 2026 · 15:02via Malwarebytes Labs

More than 100,000 fake stores are out to steal your card details

Brief

Researchers at German cybersecurity company Nebty have identified “DoppelCart,” a cluster of almost 119,000 domains linked to copied online stores.

The researchers describe it as the largest publicly documented fake-shop network by associated domain count. They found 118,787 . shop domains in the cluster, representing 2. 72% of the . shop top-level domain (TLD) population they examined.

The operation copies legitimate retailers’ product catalogs, descriptions, branding, and images, sometimes even loading images directly from the real companies’ infrastructure.

As we have reported in the past, AI-powered website builders make it easy to clone major brands. However, Nebty’s findings are based on shared website and infrastructure characteristics, rather than evidence that every domain is operated by a single identified group.

Read more on Malwarebytes Labs→