If It Sounds Too Good To Be True…
Summary: A Krebs on Security report describes hundreds of bogus storefronts selling discounted brand-name goods, tied to Chinese-registered sites and phony payment processors such as sslcreditpay.com, unimybill.com, payitrust.com and paymentsol.com. A reader's wife was charged about $100 by bearcrs.co.uk for clothing that never arrived, and sslcreditpay.com displayed Trustwave, VeriSign, Symantec and PCI Council seals that those organizations said were not authorized.
Key Takeaway: The PCI Security Standards Council and Trustwave both confirmed the trust seals on these checkout pages were bogus, and a commenter noted GeoTrust had issued an SSL certificate to payment.sslcreditpay.com - so the padlock and badge signals shoppers are trained to trust were the exact instruments of the fraud.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026