CuraSec

tag: Payment-Security · 2 items

Learn archived DoppelCart network runs 119k fake shops to steal payment cards
2026-09-09 · BleepingComputer · source ↗ #fraud#phishing#payment-security
  • Engineer — Skip
  • SOC/IR — Learn: DoppelCart’s scale (119k domains) is notable for understanding adversarial infrastructure patterns, but no IOCs or detection guidance are provided to act on immediately.
  • Leader — Learn: Useful context for board-level awareness of large-scale payment fraud operations; no vendor exposure or regulatory trigger requires immediate action.
Learn archived Zombie Card Attack Revives Expired Visa Cards via NFC Date Rewrite
2026-08-21 · The Hacker News · source ↗ #nfc#payment-security#research
  • Engineer — Learn: Interesting NFC/EMV protocol research showing a gap between cryptographic validity and expiration enforcement at POS terminals; no software patch available and no enterprise infrastructure to reconfigure, but worth tracking if you own payment integrations.
  • SOC/IR — Skip
  • Leader — Learn: Academic research with no active exploitation; relevant context for payment-related risk discussions or PCI DSS conversations, but no immediate action required.