← CampaignsPlans →
ActiveTLP:GREENConfidence: Medium
Operation CardSwarm
First seen August 20, 2025 · Last seen May 18, 2026
Public preview
Summary and targeting visible. Pro adds TTP and actor context, Pro+ adds IOC exports and enrichment.
Summary
Financial fraud campaign using phishing kits and stealer malware to harvest payment credentials from e-commerce users. Stolen data is traded on mock underground infrastructure.
Target Sectors
E-CommerceRetailFinancial Services
Target Regions
Global
Safety Note
Fictional fraud campaign. No real stolen credentials, payment data or marketplace listings included.
Actions
8 more sections available with Pro+
View plans →