{"id":1048,"date":"2026-10-15T14:45:58","date_gmt":"2026-10-15T12:45:58","guid":{"rendered":"https:\/\/sicuranext.com\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/"},"modified":"2026-10-15T14:45:58","modified_gmt":"2026-10-15T12:45:58","slug":"operation-fashionweak-luxury-brand-clone-websites-scam","status":"publish","type":"post","link":"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/","title":{"rendered":"Operation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites"},"content":{"rendered":"

The Sicuranext team has uncovered and analyzed a massive criminal infrastructure capable of mass-producing e-commerce sites that look exactly like those of leading luxury, cosmetics, and fashion brands.
\nUsing a single server, the cybercriminals targeted 71 global brands, generating over a thousand fraudulent websites and stealing the details of nearly 10,000 credit cards in just a few months.<\/p>\n

An (Almost) Perfect Scam<\/h4>\n

The social engineering operation<\/strong> carried out by this group of threat actors relies on a highly effective deceptive structure, designed specifically to avoid alarming its victims:<\/p>\n

\u2022 Through simple phishing emails<\/strong>, users are lured to perfect clones of official online stores. The deception is nearly imperceptible, relying on slight alterations to the domain name (e.g., replacing an \u201ci\u201d with an \u201cl\u201d).
\n\u2022 At checkout, the victim is redirected to a secondary domain<\/strong> designed to look like the final step of a legitimate purchase.
\n\u2022 The payment is declined, but this is part of the trick.<\/strong> The system, programmed to reject every single transaction, pushes customers to try more than one credit card to complete the purchase. No charge appears at first, so victims don\u2019t grow suspicious or contact their bank, but in the meantime their full credit card details are silently stolen and stored.<\/p>\n

The Cybercriminals\u2019 Misstep<\/h4>\n

Despite the efficiency of the scam, the criminals made serious security mistakes in managing their own servers<\/strong>, leaving the \u201cdoors open\u201d to those of us who deal with situations like this every day.<\/p>\n

By analyzing a single phishing email<\/strong>, our team was able to uncover the entire infrastructure, mapping out its operating methods and ultimately tracing the origin of the cybercriminals and the massive scale of the operation.<\/p>\n

Our cybersecurity experts also discovered that the sheer quantity and quality of the stolen data had sparked an all-out war among hackers<\/strong>. On the dark web, various groups began sabotaging one another to gain control of the stolen credit cards.
\nAs a result of these gang clashes, the criminal operation turned into a multiplied threat: victims\u2019 personal and financial data did not remain in the hands of a single group, but was likely exposed and harvested by multiple threat actors.<\/p>\n

Information and Remedies for Companies<\/h4>\n

\u2022 Monitor the registration of internet domains<\/strong> similar to your own, an increasingly common method for defrauding end consumers.
\n\u2022 Adopt automated response systems<\/strong>: these operations now move too fast for traditional security approaches.<\/p>\n

For Consumers<\/h4>\n

\u2022 Check web addresses at checkout<\/strong>: official brands do not process payments on misspelled domains or on cheap extensions (such as .shop or .us).
\n\u2022 The failed payment red flag<\/strong>: a site that declines your card but shows no charge on your statement may have just cloned your data.
\n\u2022<\/strong> Act preventively<\/strong>: since the charge does not happen in real time, the absence of unusual activity on your statement is no guarantee of safety. If you suspect you entered your details on a fake checkout page, block your card immediately.<\/p>\n

The full analysis by the Sicuranext team is available on the Sicuranext blog.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

The Sicuranext team has uncovered and analyzed a massive criminal infrastructure capable of mass-producing e-commerce sites that look exactly like […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"class_list":["post-1048","post","type-post","status-publish","format-standard","hentry","category-news"],"acf":[],"yoast_head":"\nOperation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites - Sicuranext<\/title>\n<meta name=\"description\" content=\"Luxury brand clone websites scam: Sicuranext uncovers 1,000 fake online stores, 71 brands hit and nearly 10,000 cards stolen. Learn how to stay safe.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Operation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites - Sicuranext\" \/>\n<meta property=\"og:description\" content=\"Luxury brand clone websites scam: Sicuranext uncovers 1,000 fake online stores, 71 brands hit and nearly 10,000 cards stolen. Learn how to stay safe.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/\" \/>\n<meta property=\"og:site_name\" content=\"Sicuranext\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-15T12:45:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sicuranext.com\/wp-content\/uploads\/2026\/03\/Sicuranext_Social-share-preview_dark.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"675\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Alina Ciuraru\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alina Ciuraru\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/\"},\"author\":{\"name\":\"Alina Ciuraru\",\"@id\":\"https:\/\/sicuranext.com\/en\/#\/schema\/person\/293b60aaaa474042fc808fae84416f49\"},\"headline\":\"Operation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites\",\"datePublished\":\"2026-10-15T12:45:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/\"},\"wordCount\":505,\"publisher\":{\"@id\":\"https:\/\/sicuranext.com\/en\/#organization\"},\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/\",\"url\":\"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/\",\"name\":\"Operation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites - Sicuranext\",\"isPartOf\":{\"@id\":\"https:\/\/sicuranext.com\/en\/#website\"},\"datePublished\":\"2026-10-15T12:45:58+00:00\",\"description\":\"Luxury brand clone websites scam: Sicuranext uncovers 1,000 fake online stores, 71 brands hit and nearly 10,000 cards stolen. Learn how to stay safe.\",\"breadcrumb\":{\"@id\":\"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/sicuranext.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Operation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/sicuranext.com\/en\/#website\",\"url\":\"https:\/\/sicuranext.com\/en\/\",\"name\":\"Sicuranext\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/sicuranext.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/sicuranext.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/sicuranext.com\/en\/#organization\",\"name\":\"Sicuranext\",\"url\":\"https:\/\/sicuranext.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/sicuranext.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/sicuranext.com\/wp-content\/uploads\/2026\/03\/sicuranext_logo.png\",\"contentUrl\":\"https:\/\/sicuranext.com\/wp-content\/uploads\/2026\/03\/sicuranext_logo.png\",\"width\":1152,\"height\":262,\"caption\":\"Sicuranext\"},\"image\":{\"@id\":\"https:\/\/sicuranext.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/sicuranext\",\"https:\/\/instagram.com\/sicuranext\",\"https:\/\/www.tiktok.com\/@sicuranext\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/sicuranext.com\/en\/#\/schema\/person\/293b60aaaa474042fc808fae84416f49\",\"name\":\"Alina Ciuraru\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/e3c102a578e0694ae06724e79be37a2eaa53397adfa1a43e66a5b7c44fbbfd70?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e3c102a578e0694ae06724e79be37a2eaa53397adfa1a43e66a5b7c44fbbfd70?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e3c102a578e0694ae06724e79be37a2eaa53397adfa1a43e66a5b7c44fbbfd70?s=96&d=mm&r=g\",\"caption\":\"Alina Ciuraru\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Operation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites - Sicuranext","description":"Luxury brand clone websites scam: Sicuranext uncovers 1,000 fake online stores, 71 brands hit and nearly 10,000 cards stolen. Learn how to stay safe.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/","og_locale":"en_US","og_type":"article","og_title":"Operation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites - Sicuranext","og_description":"Luxury brand clone websites scam: Sicuranext uncovers 1,000 fake online stores, 71 brands hit and nearly 10,000 cards stolen. Learn how to stay safe.","og_url":"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/","og_site_name":"Sicuranext","article_published_time":"2026-10-15T12:45:58+00:00","og_image":[{"width":1200,"height":675,"url":"https:\/\/sicuranext.com\/wp-content\/uploads\/2026\/03\/Sicuranext_Social-share-preview_dark.png","type":"image\/png"}],"author":"Alina Ciuraru","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Alina Ciuraru","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/#article","isPartOf":{"@id":"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/"},"author":{"name":"Alina Ciuraru","@id":"https:\/\/sicuranext.com\/en\/#\/schema\/person\/293b60aaaa474042fc808fae84416f49"},"headline":"Operation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites","datePublished":"2026-10-15T12:45:58+00:00","mainEntityOfPage":{"@id":"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/"},"wordCount":505,"publisher":{"@id":"https:\/\/sicuranext.com\/en\/#organization"},"articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/","url":"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/","name":"Operation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites - Sicuranext","isPartOf":{"@id":"https:\/\/sicuranext.com\/en\/#website"},"datePublished":"2026-10-15T12:45:58+00:00","description":"Luxury brand clone websites scam: Sicuranext uncovers 1,000 fake online stores, 71 brands hit and nearly 10,000 cards stolen. Learn how to stay safe.","breadcrumb":{"@id":"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/sicuranext.com\/en\/news\/operation-fashionweak-luxury-brand-clone-websites-scam\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sicuranext.com\/en\/"},{"@type":"ListItem","position":2,"name":"Operation FashionWeak: Cyber-Scam Uncovered Targeting Over 70 Luxury Companies. 10,000 Victims and 1,000 Fraudulent Websites"}]},{"@type":"WebSite","@id":"https:\/\/sicuranext.com\/en\/#website","url":"https:\/\/sicuranext.com\/en\/","name":"Sicuranext","description":"","publisher":{"@id":"https:\/\/sicuranext.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sicuranext.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/sicuranext.com\/en\/#organization","name":"Sicuranext","url":"https:\/\/sicuranext.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sicuranext.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/sicuranext.com\/wp-content\/uploads\/2026\/03\/sicuranext_logo.png","contentUrl":"https:\/\/sicuranext.com\/wp-content\/uploads\/2026\/03\/sicuranext_logo.png","width":1152,"height":262,"caption":"Sicuranext"},"image":{"@id":"https:\/\/sicuranext.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/sicuranext","https:\/\/instagram.com\/sicuranext","https:\/\/www.tiktok.com\/@sicuranext"]},{"@type":"Person","@id":"https:\/\/sicuranext.com\/en\/#\/schema\/person\/293b60aaaa474042fc808fae84416f49","name":"Alina Ciuraru","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/e3c102a578e0694ae06724e79be37a2eaa53397adfa1a43e66a5b7c44fbbfd70?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e3c102a578e0694ae06724e79be37a2eaa53397adfa1a43e66a5b7c44fbbfd70?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e3c102a578e0694ae06724e79be37a2eaa53397adfa1a43e66a5b7c44fbbfd70?s=96&d=mm&r=g","caption":"Alina Ciuraru"}}]}},"_links":{"self":[{"href":"https:\/\/sicuranext.com\/en\/wp-json\/wp\/v2\/posts\/1048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sicuranext.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sicuranext.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sicuranext.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/sicuranext.com\/en\/wp-json\/wp\/v2\/comments?post=1048"}],"version-history":[{"count":0,"href":"https:\/\/sicuranext.com\/en\/wp-json\/wp\/v2\/posts\/1048\/revisions"}],"wp:attachment":[{"href":"https:\/\/sicuranext.com\/en\/wp-json\/wp\/v2\/media?parent=1048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sicuranext.com\/en\/wp-json\/wp\/v2\/categories?post=1048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sicuranext.com\/en\/wp-json\/wp\/v2\/tags?post=1048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}