#credit


Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers

Sep 23, 2026 // 19:36

A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card […]

DoppelCart fraud network uses 119,000 fake shops to steal credit cards

Sep 9, 2026 // 00:16

A massive operation dubbed “DoppelCart” uses more than 119,000 domains to run a network of fake e-shops that steal payment card details. Most of the […]

Android malware combo takes out loans and relays victims’ credit cards

Aug 13, 2026 // 01:37

A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal card data and send it […]

Credit card theft campaign abuses Stripe to host stolen payment info

Jun 5, 2026 // 00:17

A new Magecart campaign is using Stripe’s API infrastructure to host the credit card-stealing payload and the data exfiltrated from checkout pages. The entire malicious […]

Funnel Builder WordPress plugin bug exploited to steal credit cards

May 15, 2026 // 23:56

A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript snippets into WooCommerce checkout pages. The flaw […]

They don’t hack, they borrow: How fraudsters target credit unions

May 4, 2026 // 16:56

Threat actors across underground forums and chat groups are increasingly crafting structured fraud methods aimed at exploiting weaknesses in work processes of financial institutions. Rather […]

Inside an Underground Guide: How Threat Actors Vet Stolen Credit Card Shops

Apr 17, 2026 // 17:16

The underground market for stolen credit card data has long operated as a volatile and highly deceptive ecosystem, where even experienced actors routinely fall victim […]

Tiny SVG image hides credit card theft code.

Apr 9, 2026 // 18:38

A large-scale operation affecting almost 100 online shops that use the Magento e-commerce platform conceals code designed to steal credit card information within a tiny, […]

Chilean National Alex Rodrigo Valenzuela Monje Extradited to U.S. Over Stolen Credit Card Ring

Feb 28, 2026 // 02:55

24-year-old Chilean national Alex Rodrigo Valenzuela Monje (alias “VAL4K“) has been extradited to the U.S. to face federal charges for operating a massive illegal “carding” marketplace. This […]