Scamwich: Inside a Restaurant Delivery Payment-Skimming Campaign — InfoHawk News
www.infohawk.com
InfoHawk research has uncovered a network of 820 suspicious restaurant domains impersonating major US chains, including Jersey Mike's, Jimmy John's, Firehouse Subs, Chipotle, and Dave's Hot Chicken. Some are running sophisticated payment-skimming attacks that capture credit card information and ask customers for their bank's SMS verification codes.
  • KatherinaReichelt@feddit.orgOPEnglish
    2·
    2 小时前

    This totally is on Google & Co for allowing those scam ads. They can filter those out. They are simply chosing not to.

  • ReluctantMuskrat@lemmy.worldEnglish
    7·
    6 小时前

    Damn, that’s a high-quality variation of a man-in-the-middle attack, and going after the big name companies shows how confident they are they won’t get caught. Cloudflare and Google need to be doing more to prevent this.

  • sdabbnwz@lemmy.mlEnglish
    1·
    7 小时前

    This was interesting. I’ve never considered that a scam site could proxy the real one.

    • muusemuuse@sh.itjust.worksEnglish
      1·
      33 分钟前

      It’s been possible for a very long time, but with companies standardizing in areas they really shouldn’t and the scammers being the biggest users of AI, it’s easier to pull off than it used to be.