That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards
Summary: Expired domains are being purchased and repurposed as fake e-commerce sites that skim payment card data, with a Flashpoint and RiskIQ report observing more than 800 such brand-impersonation stores since June 2018. Portland photographer Julie Randall's expired julierandallphoto.com now sells Reebok shoes over http with no SSL certificate, and she lost access to her Instagram account after the email tied to the domain was changed to a .ru address.
Bottom line: The report attributes the sites to Magecart, a collective of at least seven cybercrime groups, and notes that stolen card data is sold in online cybercrime shops while some actors sell live feeds of freshly stolen details for as long as a compromised site stays up.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026