Threat actors have set up over 540 domains that closely resemble that of Walmart and a number of career, dating, and movie and TV websites, a security professional at DomainTools discovered. So far only 181 of the spoofed domains have been blacklisted, but this number will likely increase in the near future.
Many of the domains are used as part of credential phishing campaigns targeting job hunters and users of dating and entertainment websites, while other domains are merely spam. The researcher believes all domains belong to the same actor, who seems to be operating out of Pakistan.
Read more: Ongoing Campaign Spoofs Walmart, Dating, Movie Sites