Brand impersonation, online ads, and malicious merchants help purchase scam network prey on victims
Essential information
- Published
- 20/05/2025 21:16
- Modified
- 21/05/2025 22:05
- Tags
- 2025-05-20 brand impersonation dark web services online ads purchase scam transaction laundering typosquatting
- Related entities
- 71 observables, 8 techniques (mitre), 1 others
Description
A network of 71 purchase scam websites has been identified, linked to 12 shared merchant accounts used for fraudulent transactions. The scams employ brand impersonation, online ads, and malicious merchants to target victims. The network, operational since February 2025, uses typosquatting and brand logo abuse to impersonate legitimate retailers. Transactions with the identified merchant accounts are likely fraudulent and facilitate card compromise. The network's attribution remains unclear, possibly controlled by a single actor or multiple actors collaborating through dark web services. Mitigation strategies for card issuers and merchant acquirers are provided to reduce financial fraud and compliance risks associated with these scams.