ZUBIQO.
AI & MLCryptoFinanceBig TechAI Models
CybersecurityGamingEVs & Clean EnergyRoboticsAerospaceBiotech & HealthConsumer Hardware
Enterprise
ZUBIQO.

High-magnitude intelligence briefs for the tech and finance sectors. Zero fluff. Maximum signal.

contact@zubiqo.com
X (Twitter)ThreadsTelegramBlueskyMastodon

Sections

  • AI & ML
  • Crypto
  • Finance
  • Big Tech
  • Cybersecurity
  • Gaming
  • EVs & Clean Energy
  • Robotics
  • Aerospace
  • Biotech & Health

Topics

  • OpenAI
  • Anthropic
  • Nvidia
  • Apple
  • Google
  • Microsoft
  • Meta
  • Tesla
  • SpaceX
  • Amazon
  • DeepSeek
  • Bitcoin

Publication

  • Evening Newsletter
  • About Us
  • Editorial Ethics
  • Partner With Us
  • Contact Us

Tools

  • AI Models Pricing

Legal

  • Privacy Policy
  • Terms of Service
  • Fair Use & DMCA

Disclaimer:Zubiqo Intelligence is a technology and market news publication; briefs are AI-assisted and link to their original sources. The news briefs, market analysis, “Magnitude Scores”, and “Community Sentiment” metrics provided on this platform are strictly for informational and educational purposes only. They do not constitute financial, legal, investment, or trading advice. Cryptocurrencies and financial markets are highly volatile; always conduct your own research and consult with a licensed professional before making any investment decisions. By using this site, you agree to our Terms of Service.

© 2026 Zubiqo Intelligence. All rights reserved.

  1. Home
  2. /
  3. Cybersecurity
  4. /
  5. DoppelCart Fraud Network Deploys 119,000 Fake Stores in Massive Credit Card Scraping Operation
CybersecurityMAG 7Bearish

DoppelCart Fraud Network Deploys 119,000 Fake Stores in Massive Credit Card Scraping Operation

Zubiqo Brief•via BleepingComputer•2026-09-09•2 min read
DoppelCart Fraud Network Deploys 119,000 Fake Stores in Massive Credit Card Scraping Operation
📷 Image Source: BleepingComputer

Executive Summary

  • •A massive fraud operation called DoppelCart is running 119,000 fake e-commerce sites to steal credit card data.
  • •The network impersonates over 44,000 legitimate brands and accounts for 2.72% of all .SHOP domains.
  • •Over 105,000 of these malicious shops remain online while their hosting provider ignores contact requests.

Zubiqo Take

QuoteThreads

Fraudsters are running 100,000 fake shops and the hosting providers won't even return an email, proving that infrastructure compliance is entirely performative.

Key Developments & Data

Cybersecurity startup Nebty uncovered DoppelCart, a massive fraud network operating 119,000 fake domains to steal payment details and bypass security protections. The operation accounts for 2.72% of all registered .SHOP top-level domains, with more than 105,000 sites still active.
NordVPN
AFFILIATE PARTNER30-Day Money-Back Policy • Encrypted Traffic

Encrypt your connection and network traffic with NordVPN

Get NordVPN
Affiliate disclosure: We may earn a commission if you subscribe through this link.
Attackers successfully impersonated 44,182 real brands by scraping catalogs, descriptions, and directly loading assets from legitimate company servers. The checkout infrastructure uses WebSockets to intercept and steal credit card data and bank-issued one-time confirmation codes in real time. "96% of the shops confirmed to be part of DoppelCart share identical build files and resolve to 27 commerce backends." — Benedikt Scheungraber

Zubiqo Strategic Assessment

Primary Impact

Global e-commerce brands and consumers, specifically targeting retail brands like SodaStream and Daniel Wellington with discount lures of up to 65%.

Strategic Shift

The automation of domain registration and site cloning has turned bespoke phishing into industrial-scale infrastructure, overwhelming traditional brand protection.

The Ripple Effect

The .SHOP TLD registry will likely face intense regulatory and industry pressure to purge fraudulent registrations as this network accounts for nearly 3% of their entire namespace.

This intelligence assessment is generated by Zubiqo's AI for informational purposes only.

Community Sentiment

1-Tap Vote
Zubiqo Briefing

The daily signal, delivered every weekday.

A concise weekday briefing on AI, technology and business. Zero PR fluff.

Subscribe directly on Substack↗

Subscription completes on Substack • Free • 1-click unsubscribe anytime

✓ Free on Substack•✓ Official Substack enrollment•✓ 1-click unsubscribe

Intelligence Quality Rating

Grade this brief: Slide & release to submit rating, or tap a preset.

🔥High Impact75/100
Slide & release to voteImmune to accidental scroll
#doppelcart#cybersecurity#phishing#ecommerce#fraud
Read original on BleepingComputer
Zubiqo MethodologySource-linked

AI-assisted brief based on the original reporting linked below, published under Zubiqo's editorial standards. Have a correction? Contact our desk.

Event Magnitude7 / 10
Share

Read Next

Navigate360 Confirms Data Breach Months After Reports of 8M Exposed Tips
Cybersecurity

Navigate360 Confirms Data Breach Months After Reports of 8M Exposed Tips

OpenAI Red-Teaming AI Agents Build Covert CPU Cache Channel Across Isolated MicroVMs
Cybersecurity

OpenAI Red-Teaming AI Agents Build Covert CPU Cache Channel Across Isolated MicroVMs

Stay on the wire

Breaking tech, AI, and market intelligence the moment it happens. Zero fluff.

Live Broadcasts
TelegramXThreadsBlueskyMastodon
City of Columbia Confirms Ransomware Attack Disrupted Public Online Services
Cybersecurity

City of Columbia Confirms Ransomware Attack Disrupted Public Online Services

Ottawa and Ontario Police Suspend Crime Stoppers After 1.5M Tips Leaked
Cybersecurity

Ottawa and Ontario Police Suspend Crime Stoppers After 1.5M Tips Leaked

Zubiqo Methodology

Source-linked

AI-assisted brief based on the original reporting linked below, published under Zubiqo's editorial standards. Have a correction? Contact our desk.

Event Magnitude7 / 10

Related Briefs

Cybersecurity

Navigate360 Confirms Data Breach Months After Reports of 8M Exposed Tips

Oct 24
Cybersecurity

OpenAI Red-Teaming AI Agents Build Covert CPU Cache Channel Across Isolated MicroVMs

Oct 24
Cybersecurity

City of Columbia Confirms Ransomware Attack Disrupted Public Online Services

Oct 24
Cybersecurity

Ottawa and Ontario Police Suspend Crime Stoppers After 1.5M Tips Leaked

Oct 24
Crypto

Swell Freezes swETH and rswETH Withdrawals After Suspected Key Compromise

Oct 24
Cybersecurity

Hacker Team Calif Jailbreaks Apple iPhone Duo on iOS 27.1 Hours After Launch

Oct 24