DoppelCart shopping-fraud network reaches about 261,700 domains
About 40 percent of sites observed before October 17 remain active, and some checkouts capture bank one-time codes.
Stories per day · 30 days
2 RSS
Relatedphishing4akamai2affiliate-fraud1booking-com1check-point1clickfix1coacev1cofish-ws1cogui1credential-theft1docusign1domain-infrastructure1doppelcart1ecommerce1fleetdeck1fraud1gift-card-scams1infostealer1
18 stories, newest first · one card per story
Stories tagged #brand-impersonation
Fake gift card scams impersonate trusted brands for subscriptions
Campaigns trick users with celebrity ads into fake reward portals that lead to mobile subscriptions and app installs instead of delivering cards.
Akamai post says attackers impersonate brands, not customers
The October 29 post points to a State of the Internet report covering logo abuse, look-alike domains, and spoofed portals.
1
Online scam detections doubled and overtook phishing, Akamai says
Akamai and Bolster AI counted about 6.4 million scams in April–June 2026, while phishing detections rose 61%.
Storm-1865 used ClickFix and Booking.com lures against hotels
Fake CAPTCHA pages pushed mshta commands that installed stealers and RATs; Booking.com says its own systems were not breached.
1
Microsoft led brand-impersonation phishing in Check Point’s Q3 2026 data
Apple and Google each had 8%, while later lures spoofed Claude, Google Antigravity, Apple, and Docusign.
2
Chinese Phishing Network Uses 17,000 Domains to Target Japanese Banks and Steal Credentials
Chinese-language phishing kits used about 17,000 domains to steal credentials from Japanese bank and retail customers.
4
Inside a brand deal scam targeting YouTube creators
Scammers impersonate brands such as Hollyland to phish YouTube creators and hijack Google accounts.
Ontinue extends ION MXDR with managed dark web monitoring
Ontinue launched managed dark web monitoring that investigates exposed credentials and brand impersonation inside ION MXDR.
Attackers Create Fake Jev AI Stores to Intercept Prompts Through Third-Party Servers
Eye Security found fake Jev AI storefronts reselling genuine API access while routing user prompts through attacker-controlled third-party servers at up to 11.5x official prices.
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
GitHub-based LastPass impersonation distributed 'Rapuncel' infostealer using a signed driver to kill 145 security tools.
3
The Lure Isn't The Malware. It's Your Logo.
Recorded Future launches Malicious Site Monitoring in Digital Risk Protection, showcasing ClickFix brand-impersonation detection with AI triage.
1
Hackers Use Fake T-Mobile Rewards Expiry Texts to Lure Users to Phishing Sites
Malwarebytes tracks a T-Mobile smishing campaign using 1,000+ fake rewards-expiry text templates and 81+ disposable .top domains to steal credentials and payment data.
4
Teams calls are about to get a lot harder to fake
Microsoft will roll out Brand Impersonation Protection in Teams Calling from mid-May 2026, warning users about suspicious inbound VoIP calls impersonating trusted brands.
Scammers are getting smarter about where they target you
Malwarebytes data shows scammers tailor fraud by platform: 90% of toll scams arrive via email/SMS and MrBeast is now the most impersonated person.
1
When the Attacker Wears Your Logo: Detecting and Taking Down Impersonation at AI Speed
Cyble details how attackers use lookalike domains and cloned sites for brand impersonation scams and how AI-speed detection enables rapid takedowns.
Brand Impersonation Takedown: From Whack-a-Mole to Managed Response
Mandiant-tracked group UNC3753 impersonated US professional services firms' brands in 2026; Cyble urges managed takedowns over manual abuse reports.
1
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
Researchers found 737 Chrome VPN extensions, many impersonating brands like NordVPN, routing roughly 75,000 users' browser traffic through attacker-controlled SOCKS5 proxies.
2