Fake Online Stores Steal Card Data Across 4,800+ Impersonated Brands
A large-scale skimming operation known as GorgonAgora runs over 4,800 fake storefronts impersonating major global brands to steal payment card data. The campaign uses Medusa.js storefronts with injected checkout skimmers that exfiltrate data via encrypted WebSocket channels. Stolen payment details are relayed to central command infrastructure for real-time processing.
Source: Sansec Forensics Team
Read more: CyberSecBrief













