GorgonAgora: Inside the 4,800-Storefront Checkout Skimming Machine
Sansec research reveals 4,880+ fake .shop storefronts impersonating real brands with a custom checkout SDK and real-time 3DS relay. The attack doesn’t touch your store — it builds a parallel one. Here’s what makes it work and how to find clones of your catalog.