{"id":4979,"date":"2024-01-17T20:55:11","date_gmt":"2024-01-17T20:55:11","guid":{"rendered":"https:\/\/shreshtait.com\/blog\/?p=4979"},"modified":"2025-09-30T14:37:55","modified_gmt":"2025-09-30T09:07:55","slug":"online-shopping-frauds-in-india","status":"publish","type":"post","link":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/","title":{"rendered":"Online Shopping frauds in India"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\" id=\"h-executive-summary\"><strong>Executive Summary<\/strong><\/h2>\n\n\n\n<p>Since October 2023, our <a href=\"https:\/\/shreshtait.com\/blog\" target=\"_blank\" rel=\"noreferrer noopener\">threat intelligence team<\/a> has been tracking online shopping frauds in India, targeting e-commerce platforms such as <a href=\"https:\/\/www.dmartindia.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">DMart<\/a>, <a href=\"https:\/\/www.jiomart.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">JioMart<\/a>, <a href=\"https:\/\/www.flipkart.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Flipkart<\/a>, <a href=\"https:\/\/www.amazon.in\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon<\/a>, <a href=\"https:\/\/www.croma.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Tata Croma<\/a> and <a href=\"https:\/\/www.1mg.com\" target=\"_blank\" rel=\"noreferrer noopener\">Tata 1mg<\/a>.  <\/p>\n\n\n\n<p>These deceptive websites lure users with substantial discounts, enticing offers, and prizes in an attempt to extract Personally Identifiable Information(PII) and payment details of the user. The phishing websites closely resemble the appearance of authentic e-commerce websites. <\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-motive\"><strong>Motive<\/strong><\/h2>\n\n\n\n<p>The motive of the threat actors is financial fraud and to harvest the Personally Identifiable Information (PII) of the user not limiting to,<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The name and address<\/li>\n\n\n\n<li>The contact number<\/li>\n\n\n\n<li>Debit\/Credit Card details<\/li>\n<\/ul>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-technical-analysis-of-online-shopping-fraud-websites\"><strong>Technical analysis of online shopping fraud websites<\/strong><\/h2>\n\n\n\n<p>In this section, we will explore a few of online shopping frauds in India. <\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-1-impersonating-flipkart\"><strong>Phishing website #1 impersonating Flipkart<\/strong><\/h3>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/Dckbb3OHbFzcWIc93LvUeoC6pO_mX9gYyUqnkRikoiGr8AVS74Ddhg3qKDi0IZ7U1OvGo-nkBhpLkEZvpk7aM3jFKG_TS1cZ1CKhJHqWh4l9z__qd_ynSJPA1Ux0xroegFAtbBH-IY5EFUXGrSc1kMs\" style=\"\" alt=\"Phishing website impersonating Flipkart\">Figure 1 &#8211; Screenshot of the phishing website impersonating Flipkart<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>The deceptive website lures users with a good-to-be-true offer &#8211; a Tata Nexon car!<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1598\" height=\"804\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-28.png\" alt=\"Phishing page of Flipkart- Product page\" class=\"wp-image-5217\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-28.png 1598w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-28-300x151.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-28-1024x515.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-28-768x386.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-28-1536x773.png 1536w\" sizes=\"auto, (max-width: 1598px) 100vw, 1598px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 2 &#8211; The product page of the phishing website<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/x0GNBemuaJUpQxhFh3oyNvkeBJYswacGT_xPLFmigCGo38Pf_RbVKc5pDqjJAXoRJc139j-R3luZglftFcjbXFfXD4WCPyh2EDQjqq38V7EbPKWu40DNzOjWndqeWjZm0Ysgb4LTC-kjMMTnI3LZRoM\" style=\"\" alt=\"Phishing page displaying prizes\">Figure 3 &#8211; The page displays a list of prizes on offer\u00a0<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1598\" height=\"803\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-7.png\" alt=\"Phishing page displaying  user instructions\" class=\"wp-image-5196\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-7.png 1598w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-7-300x151.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-7-1024x515.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-7-768x386.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-7-1536x772.png 1536w\" sizes=\"auto, (max-width: 1598px) 100vw, 1598px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 4 &#8211; The page provides instructions on how users can win the prizes<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/OXoZixh8Agvn9YUD0t-5-kI3DHVbDaLdZtplQyRmz2E9jwLU7uJH_viY61Iiqk2adLp7Gd_kwHFA72H8oipYc-pRa2P2q0TDbc-gSuvv3_1MY9ijBSmSShXD4QxVRJrLSiuatgepo-iyCk4-KMwpwIc\" style=\"\" alt=\"Phishing page displaying list of winners.\">Figure 5 &#8211; The page displays a list of winners<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1598\" height=\"803\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-31.png\" alt=\"Phishing page prompting users to enter phone number to check if they have won a prize\" class=\"wp-image-5220\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-31.png 1598w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-31-300x151.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-31-1024x515.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-31-768x386.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-31-1536x772.png 1536w\" sizes=\"auto, (max-width: 1598px) 100vw, 1598px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 6 &#8211; The page urges users to enter their contact number to verify if they have won a prize. <\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/v7h2dvwcrsiFaBcZV2WqsM2SdQW0N8eCFs3ectnVoFJDrrpVKgQHZnXoj7HYw5MgatB_Bf6iEUMuxDNoo5YYjbIrcUrkOHMWD6uBO6d3iaCvZEA-kVLcAi8rkSN_kFmOG0UcSHJx96GqQ2TfAynRpxo\" style=\"\" alt=\"Phishing page displaying terms and conditions\">Figure 7 &#8211; A page displaying the terms and conditions page of the phishing website<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/9YY6psckhwoSvIgWnTRkOJoMLBt6ZJHWjRygVj8i0jFPUe3RNQ61KmDDDHRD3doEE96DzAy2uv9y8k8GjVBLwxglstaNqx8I0MgJptbnV6dOg1qS626Qkfn2NQ8jCDdwiNCVrZF6T3D8JuINKCp3meU\" style=\"\" alt=\"Phishing page displaying contact page\">Figure 8 &#8211; Screenshot of the contact page on the phishing website.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-2-impersonating-flipkart\"><strong>Phishing website #2 impersonating Flipkart<\/strong><\/h3>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/CxwzyqYtmqFTuVYuyK1aOTz73AV5cRLj9x5AO7c-w4AHoEg9gxruq5UZKzmffXWlQujPZx6QQNDkB09IqXqy3iZAVHFQZgMoS1UySfYz2kMP0oqzoaX_jzKg-mnlwyynJM6Fd9efrlFrMFT3IuHZ7f4\" style=\"\" alt=\"Phishing page #2 impersonating Flipkart\"><br>Figure 9 &#8211; Screenshot of the phishing website #2 impersonating Flipkart<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/27wjk6gwi3Rq-SgFrBeJu51UxPyx3FuS_JZY0h0KkSnTMrToWWbVImgbgkuuD__dBvI0-pyAEoiYuoIZu6u2gNIRTvnHr3icyVTnegqE8RvrddSJxPZ8YeeHj7F367jIL7em78DDmn1LStq6Oatp9X0\" style=\"\" alt=\"Phishing page requesting user to enter their address\"><br>Figure 10 &#8211; Upon clicking on \u201cBuy Now\u201d the user is prompted to enter their address<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/vAEMU78Efy74IYvrWziGZG2gjCX6VS8RYNDR6_2zLDuTHxogj0B7iI7Tez_5OsD9KIXqHK8UMjocY07H56dQKP-lC4gtgPXZuSOtFfS48P3IOHfRjFaZbjgvpvoAcS-WGpzSdE6W2c_LVBbL8gTdZN4\" style=\"\" alt=\"Phishing website accepting user input and asking them to continue\">Figure 11 &#8211; The website accepts any details and prompts the user to continue<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1598\" height=\"807\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-29.png\" alt=\"Phishing web page user to select payment method\" class=\"wp-image-5218\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-29.png 1598w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-29-300x152.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-29-1024x517.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-29-768x388.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-29-1536x776.png 1536w\" sizes=\"auto, (max-width: 1598px) 100vw, 1598px\" \/><\/figure>\n\n\n\n<p>Figure 12 &#8211; The payment page prompts the user to select a payment method<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/kxcGuwoyqsfaedA9g98QNnqMLDNMq5W7xrlw8q8CYP1Y3oU2CY7uzc7vMSak5gVXncYK7_9EiFeVJzlw9-9n687fBpSEaP04YMwTyfeqtNa_8ixZMAmIXUvL13HoN_0FihiAFG7f8gvRfaIiSD3zrjM\" style=\"\" alt=\"Phishing website generates fake order ID\">Figure 13 &#8211; The website generates a fake order ID and prompts the user to make the payment using UPI<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-impersonating-amazon\"><strong>Phishing website impersonating Amazon<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1596\" height=\"802\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-23.png\" alt=\"Phishing website impersonating Amazon\" class=\"wp-image-5212\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-23.png 1596w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-23-300x151.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-23-1024x515.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-23-768x386.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-23-1536x772.png 1536w\" sizes=\"auto, (max-width: 1596px) 100vw, 1596px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 14 &#8211; Screenshot of the phishing website impersonating Amazon<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/RDscuYnt27mNHqqYh_rRFqpsIiPjAOzK-xPaTZ6Y1E_hypjyMF0TIqfxDUJeSQOtuWs6U6mM-WpzEo30InbDKxN_1byqcK4lUYNjKrsU7JAk-k-R0FPBapTPpLzqoXITjFVKTH98oWlKS04PWqlV3IA\" style=\"\" alt=\"Phishing page of Amazon- Product page\"><br>Figure 15 &#8211;\u00a0 The product page of the phishing website<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>Clicking on &#8220;MORE DETAILS&#8221; redirects the user to the next page, where they are prompted to purchase the device.<\/p>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/F-U1tc5FMV8NTlk6Ox6Io3DMTSAQtD0VMyJr86JA2e6riWL2keFGZvu5gTVCT9MpmPkM6jXVgUzaEY-lT9ZqJfSwnoRn7Vz7N8oyZuv2uax3KrxS_8K3HzGd5v-deV4AfYMd475M-RPMnLoJvAK6q2M\" style=\"\" alt=\"Phishing website redircting to legitimate Amazon website\">Figure 16 &#8211; Upon clicking &#8220;BUY NOW,&#8221; the user is redirected to the authentic Amazon site.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-1-impersonating-dmart\"><strong>Phishing website #1 impersonating DMart<\/strong><\/h3>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/gpTy6NuUw0RLuVdO5opfOPTNzeqSSLP6-SKtKdRkg3hVjGhtSgNmUI8IUvWjIs3P4AcDlf1RbxxItcFWhnNeWHWmGDqnTKZoUJMFD6TfSISvVZgtgeggyIyHvKMqwnHj5vMlUqpyh0EjDuOttjKNEZ4\" style=\"\" alt=\"Phishing site impersonating DMart\">Figure 17 &#8211; Screenshot of the phishing website impersonating DMart<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1599\" height=\"741\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-20.png\" alt=\"Phishing site of DMart order now page\" class=\"wp-image-5209\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-20.png 1599w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-20-300x139.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-20-1024x475.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-20-768x356.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-20-1536x712.png 1536w\" sizes=\"auto, (max-width: 1599px) 100vw, 1599px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 18 &#8211; Screenshot of the \u201cORDER NOW\u201d page of the phishing page<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1599\" height=\"741\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-22.png\" alt=\"Phishing page of DMart -Shopping cart\" class=\"wp-image-5211\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-22.png 1599w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-22-300x139.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-22-1024x475.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-22-768x356.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-22-1536x712.png 1536w\" sizes=\"auto, (max-width: 1599px) 100vw, 1599px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 19 &#8211; The Shopping Cart of the phishing website<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/d19U5vdvoTFqtLqPQO2laqAxCWqXYYt9pWUX1A_0MjrpjUtullKhpK4RwF6u27LglpHJ-r3JrDa8Ui6H2HccWi8HnhIuGK-6kS8l-RRFnany3rR71cOydyVSxwZ6HLp_83mPwfG8T0xmE8QDXcxQXMQ\" style=\"\" alt=\"Phishing page of DMart- Payment page\">Figure 20 &#8211; Payment page requiring the users PII and payment details<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"264\" height=\"79\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-8.png\" alt=\"Phishing page of DMart redirects user after payment button clicked\" class=\"wp-image-5197\"\/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 21 &#8211; After clicking on &#8220;Pay,&#8221; the user is redirected to another page and prompts the message.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-2-impersonating-dmart\"><strong>Phishing website #2 impersonating DMart<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"806\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-21.png\" alt=\"Phishing website-2 of DMart\" class=\"wp-image-5210\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-21.png 1600w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-21-300x151.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-21-1024x516.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-21-768x387.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-21-1536x774.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 22 &#8211; Screenshot of the phishing website #2 impersonating DMart<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1583\" height=\"806\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-12.png\" alt=\"Phishing site-2 of DMart login page\" class=\"wp-image-5201\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-12.png 1583w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-12-300x153.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-12-1024x521.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-12-768x391.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-12-1536x782.png 1536w\" sizes=\"auto, (max-width: 1583px) 100vw, 1583px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 23 &#8211; Login page on the phishing website<br><\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>The website displays an error when attempting to log in with invalid credentials.<\/p>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/u-Zi5bDPpfEDqY7Os_3c9TtUXxYqZyfvJuPGNZ8-2mWJwGZOJFxUNFT-btYE99B-4hjFpGSSNgOX91jzKDOdUvn4oxBIo28OU2VQ2sovmm6I42Tt8RXubenI8MCViO3XM9zCTM_4Db4qrcfO1uJLdDM\" style=\"\" alt=\"Phishing site-2 of DMart prompting user to create account\"><br>Figure 24 &#8211; Create account page on the phishing website<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>The phishing website accepts any details and allows the user to login without email verification.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1575\" height=\"807\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-19.png\" alt=\"Phishing website-2 of DMart shopping cart\" class=\"wp-image-5208\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-19.png 1575w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-19-300x154.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-19-1024x525.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-19-768x394.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-19-1536x787.png 1536w\" sizes=\"auto, (max-width: 1575px) 100vw, 1575px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 25 &#8211; Shopping cart on the phishing website<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"940\" height=\"802\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-10.png\" alt=\"Phishing page-2 of DMart requesting PII\" class=\"wp-image-5199\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-10.png 940w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-10-300x256.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-10-768x655.png 768w\" sizes=\"auto, (max-width: 940px) 100vw, 940px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 26 &#8211; The payment page prompts the user for PII details<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>After entering the details, selecting the payment method and submitting the form, the website throws an error  &#8220;Client_id Missing From The Provided Configuration. Please Add Your Application Client_id.&#8221;<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-3-impersonating-dmart\"><strong>Phishing website #3 impersonating DMart<\/strong><\/h3>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/vPAr_NuikesFZr3wI8E4NjebqEVcRpvO7RA1Pb7OSj5ArvLqSz5QM3up9aFdfc0WjMTPuVVOx7cTAnlOit0NoiBLFgl-kHWJTEWeDU0sy6MBGEY443x4xQZRam-AH8neAb2v-43gLniolQ_Xu4h7tfc\" style=\"\" alt=\"Phishing website-3 impersonating DMart\">Figure 27 &#8211; Screenshot of the phishing website impersonating DMart<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1598\" height=\"807\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-16.png\" alt=\"Phishing website-3  redirecting to cart after product is chosen\" class=\"wp-image-5205\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-16.png 1598w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-16-300x152.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-16-1024x517.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-16-768x388.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-16-1536x776.png 1536w\" sizes=\"auto, (max-width: 1598px) 100vw, 1598px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 28 &#8211; After choosing the product, the user is redirected to the cart.<\/p>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/K0co5sr-nlaMRPIfNyFSqF_r5IHGvQapr7hS7Ay7TXLMDuWekJXiEBo-grxMBdcEEHUFKAmHFfNJztITAxtfmGQO_uPtOaCXVgtld7ft61f7iCJCcmFpXvDFDNVwCJISVuPNqXX5JkCRdYJvWmFTTnU\" style=\"\" alt=\"Phishing website-3 prompting user to enter PII\"><br>Figure 29 &#8211; The Billing Details page prompts the user to enter their PII details and card details<\/p>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/7FXkEVy_Sm4ehfi6jpWhuTvOEhEwXyWFNDp6YJl-rQGeM5uoBb2jAgKLCHgnjfsSzYWCH2IC-R6hGDVJQXxVpfVt0-T8LQZ8zeELMvLsCgTG9c3hO8BaSb8TUJo30fpGCTbkZEa56idDaEYo357kWFw\" style=\"\" alt=\"Phishing website-3 accepting user data asks to download APK file\">Figure 30 &#8211; The billing page accepts any details.<\/p>\n\n\n\n<p>The phishing website prompts the user to download a DMart APK to finalize the pending order.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1598\" height=\"790\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-14.png\" alt=\"Phishing website-3  APK file flagged as malicious by vVirus Total\" class=\"wp-image-5203\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-14.png 1598w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-14-300x148.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-14-1024x506.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-14-768x380.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-14-1536x759.png 1536w\" sizes=\"auto, (max-width: 1598px) 100vw, 1598px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 31 &#8211; VirusTotal identifies the APK from the phishing website as malicious<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-impersonating-tata-croma-electronics\"><strong>Phishing website impersonating Tata Croma Electronics<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"802\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-11.png\" alt=\"Phishing website impersonating Croma\" class=\"wp-image-5200\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-11.png 1600w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-11-300x150.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-11-1024x513.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-11-768x385.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-11-1536x770.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 32 &#8211; Screenshot of the home page of the phishing website impersonating the Croma store<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"802\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-24.png\" alt=\"Phishing website of Croma products page\" class=\"wp-image-5213\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-24.png 1600w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-24-300x150.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-24-1024x513.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-24-768x385.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-24-1536x770.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 33 &#8211; Screenshot of the products page of the phishing website<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"802\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-9.png\" alt=\"Phishing website of Croma prompting user to enter PII\" class=\"wp-image-5198\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-9.png 1600w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-9-300x150.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-9-1024x513.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-9-768x385.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-9-1536x770.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 34 &#8211; Upon selecting &#8220;Buy Now,&#8221; the user is prompted to enter PII and payment details.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-impersonating-jiomart-franchisee-application-website\"><strong>Phishing website impersonating JioMart franchisee application website<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"802\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-25.png\" alt=\"Phishing website impersonating JioMart\" class=\"wp-image-5214\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-25.png 1600w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-25-300x150.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-25-1024x513.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-25-768x385.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-25-1536x770.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 35 &#8211; Screenshot of the phishing website impersonating JioMart franchisee application website<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"781\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-18.png\" alt=\"Phishing website of JioMart prompting user to enter personal details\" class=\"wp-image-5207\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-18.png 1600w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-18-300x146.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-18-1024x500.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-18-768x375.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-18-1536x750.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 36 &#8211; After clicking on &#8220;Apply Now,&#8221; the user is prompted to fill out a form.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/PXaF99vSv6z-0-vUbyTLntdOjI2p44ts6hh56h4kePb-op5cnO0sFl14_Hk5NO4_hOlZkgiYnVZXZIcyDpwGiz70gnIgtazPklm11t5jNF0zyWrcaYhQfdpPyEu-MoEIdlraPABDE4lcMZm0svhHxDg\" style=\"\" alt=\"Phishing website of JioMart application successful message\"><br>Figure 37 &#8211; After the user submits the form, the user is informed that their application was successful and a representative will contact them soon.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-impersonating-jiomart\"><strong>Phishing website impersonating JioMart<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"801\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-26.png\" alt=\"Phishing website -2 of JioMart\" class=\"wp-image-5215\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-26.png 1600w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-26-300x150.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-26-1024x513.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-26-768x384.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-26-1536x769.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 38 &#8211; Screenshot of the phishing website impersonating JioMart<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/zq0uUl0cgYBz5I86pjE3E8ClVTAAdZeH2yFr9m2eF9wyfxtWVgAw1oMSCtegRM4SNkxD1btGwirfuBU94MrUTalFHf8QL8JiK2lHhUZdlLfkBMKDbNVdo7cbbimscepeyF40hEUaku7W602ZeMmm7Ic\" style=\"\" alt=\"Phishing website-2 of JioMart prompting user to proceed to payment page\"><br>Figure 39 &#8211; After clicking on \u201cBuy\u201d the user is asked to Proceed to payment page<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/jiSTTnXIiGxvUTtTb4olYVQIdhAoa2fBytmEKqHLsrXhBVjimEIPGxUtC4vpwvzvSdag54O71CynDRNDJ69PtwF8Pn_GgeEaPzfjj-PXZHNklKRof-f5iI7lO8fVadAw-FUWF_LP7AGXMjTkvXOI9EA\" style=\"\" alt=\"Phishing website-2 of JioMart prompting user to enter credit card number and personal details\"><br>Figure 40 &#8211; The payment page prompts the user to enter their personal details and credit card information.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"801\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-13.png\" alt=\"Phishing site-2 of JioMart accepting false credentials and asking to download APK file\" class=\"wp-image-5202\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-13.png 1600w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-13-300x150.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-13-1024x513.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-13-768x384.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-13-1536x769.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 41 &#8211; The payment page accepts false details and asks the user to confirm their order<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>After confirming, the website prompts the user to download a JioMart APK.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>APK &#8211; The Android Package with the file extension apk is the file format used by the Android operating system<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"791\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-15.png\" alt=\"\" class=\"wp-image-5204\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-15.png 1600w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-15-300x148.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-15-1024x506.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-15-768x380.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-15-1536x759.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 42 &#8211; The APK is flagged by VirusTotal as Android.Riskware.TestKey.rA, Trojan-Spy.AndroidOS.Banker and Android.PUA.DebugKey<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-1-impersonating-tata-1mg\"><strong>Phishing website #1 impersonating Tata 1mg<\/strong><\/h3>\n\n\n\n<p class=\"has-text-align-center\"><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/zOKI8qtcj1bMtVPv5w_mi5Pqvw_vNKMGTt5AqFnG6d-LjVCU4VnijI99FtmMPrj98dO_JKU5VE4TV8IeG_JUhS7y85JmuPmQgza10NVTr9oqfvX3-fDb6K5BXN_Y4ToStPi70oPR58jw-Z1GjZtRXUU\" style=\"\" alt=\"Phishing website impersonating TATA 1 mg\"><br>Figure 43 &#8211; Screenshot of the phishing website impersonating TATA 1mg pharmacy<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>The website prompts the user to apply for the TATA 1mg pharmacy franchise<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1598\" height=\"807\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-17.png\" alt=\"Phishing website prompting user to become a franchise\" class=\"wp-image-5206\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-17.png 1598w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-17-300x152.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-17-1024x517.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-17-768x388.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-17-1536x776.png 1536w\" sizes=\"auto, (max-width: 1598px) 100vw, 1598px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 44 &#8211; Clicking on &#8220;Apply Here&#8221; prompts the user to enter their PII details.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>Upon submitting the details on the &#8220;Apply Now&#8221; page, the user receives a \u201cSuccessfully Applied\u201d message<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-phishing-website-2-impersonating-tata-1mg\"><strong>Phishing website #2 impersonating Tata 1mg<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1591\" height=\"801\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-27.png\" alt=\"Phishing website-2 impersonating TATA 1 mg\" class=\"wp-image-5216\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-27.png 1591w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-27-300x151.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-27-1024x516.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-27-768x387.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-27-1536x773.png 1536w\" sizes=\"auto, (max-width: 1591px) 100vw, 1591px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 45 &#8211; Screenshot of the phishing impersonating TATA 1mg<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>The phishing website prompts the user to apply for the TATA 1mg pharma franchise&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1591\" height=\"801\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-30.png\" alt=\"Phishing site of TATA 1mg requesting personal information\" class=\"wp-image-5219\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-30.png 1591w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-30-300x151.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-30-1024x516.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-30-768x387.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/image-30-1536x773.png 1536w\" sizes=\"auto, (max-width: 1591px) 100vw, 1591px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\">Figure 46 &#8211; After clicking on &#8220;APPLY NOW,&#8221; the user is prompted to enter their PII details.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>Upon submitting the details, the user is greeted with a message informing that their information has been successfully added.<\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-safety-recommendations\"><strong>Safety Recommendations<\/strong><\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Purchase products directly from the official website of the brand or from recommended authorized retailers<\/li>\n\n\n\n<li>Research the seller before purchasing the product<\/li>\n\n\n\n<li>Be cautious of purchasing products from websites offering prices significantly lower than those on the official website, or offering free coupons\/items.<\/li>\n\n\n\n<li>If you become a victim of cybercrime, particularly financial crime, call the national (India) cybercrime helpline 1930 or file a complaint at <a href=\"https:\/\/cybercrime.gov.in\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/cybercrime.gov.in\/<\/a>&nbsp;<\/li>\n<\/ol>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-conclusion\"><strong>Conclusion<\/strong><\/h2>\n\n\n\n<p>Online shopping frauds in India are on the rise. Threat actors are impersonating not only the online shopping platforms in India but also targeting business users who are interested in operating a franchise store of popular brands. <\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-interested-to-monitor-your-brand-on-the-internet\"><strong>Interested to monitor your brand on the Internet? <\/strong><\/h2>\n\n\n\n<p>Please send us an email to info@shreshtait.com for an early bird access to our brand monitoring product. <\/p>\n\n\n\n<div style=\"height:17px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-recommended-reading\"><strong>Recommended reading<\/strong><\/h2>\n\n\n\n<p>A few other threat intelligence blog posts that you might be interested in,<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-dns-security-amp-threat-intelligence-blog-shreshta wp-block-embed-dns-security-amp-threat-intelligence-blog-shreshta\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"CUiFYCZXjH\"><a href=\"https:\/\/shreshtait.com\/blog\/2024\/01\/national-crime-records-bureau-your-browser-has-been-locked\/\">National Crime Records Bureau &#8211; Your browser has been locked<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"&#8220;National Crime Records Bureau &#8211; Your browser has been locked&#8221; &#8212; DNS Security &amp; Threat Intelligence Blog | Shreshta\" src=\"https:\/\/shreshtait.com\/blog\/2024\/01\/national-crime-records-bureau-your-browser-has-been-locked\/embed\/#?secret=7FgErVjUxH#?secret=CUiFYCZXjH\" data-secret=\"CUiFYCZXjH\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-dns-security-amp-threat-intelligence-blog-shreshta wp-block-embed-dns-security-amp-threat-intelligence-blog-shreshta\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"PHipm3TECL\"><a href=\"https:\/\/shreshtait.com\/blog\/2023\/12\/phishing-campaign-targeting-state-bank-of-india-users\/\">Phishing Campaign targeting State Bank of India users<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"&#8220;Phishing Campaign targeting State Bank of India users&#8221; &#8212; DNS Security &amp; Threat Intelligence Blog | Shreshta\" src=\"https:\/\/shreshtait.com\/blog\/2023\/12\/phishing-campaign-targeting-state-bank-of-india-users\/embed\/#?secret=SJBA1D3Y5T#?secret=PHipm3TECL\" data-secret=\"PHipm3TECL\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-dns-security-amp-threat-intelligence-blog-shreshta wp-block-embed-dns-security-amp-threat-intelligence-blog-shreshta\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"AJz9YATIOa\"><a href=\"https:\/\/shreshtait.com\/blog\/2023\/12\/hdfc-bank-customers-targeted-by-a-sophisticated-phishing-scam\/\">HDFC Bank customers targeted by a sophisticated Phishing Scam<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"&#8220;HDFC Bank customers targeted by a sophisticated Phishing Scam&#8221; &#8212; DNS Security &amp; Threat Intelligence Blog | Shreshta\" src=\"https:\/\/shreshtait.com\/blog\/2023\/12\/hdfc-bank-customers-targeted-by-a-sophisticated-phishing-scam\/embed\/#?secret=r9O6EMNUVs#?secret=AJz9YATIOa\" data-secret=\"AJz9YATIOa\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Executive Summary Since October 2023, our threat intelligence team has been tracking online shopping frauds in India, targeting e-commerce platforms such as DMart, JioMart, Flipkart, Amazon, Tata Croma and Tata 1mg. These deceptive websites lure users with substantial discounts, enticing offers, and prizes in an attempt to extract Personally Identifiable Information(PII) and payment details of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":5195,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[98,42],"tags":[113,112,109,108,76,110,48,111,47],"class_list":["post-4979","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scam","category-threat-intelligence","tag-1mg","tag-croma","tag-dmart","tag-flipkart","tag-india","tag-jiomart","tag-phishing","tag-tata","tag-threat-intelligence"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Online Shopping frauds in India<\/title>\n<meta name=\"description\" content=\"Shreshta threat intelligence team has detected online shopping frauds in India targeting Flipkart, Amazon, Tata Croma, Tata 1mg.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Online Shopping frauds in India\" \/>\n<meta property=\"og:description\" content=\"Shreshta threat intelligence team has detected online shopping frauds in India targeting Flipkart, Amazon, Tata Croma, Tata 1mg.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/\" \/>\n<meta property=\"og:site_name\" content=\"DNS Security &amp; Threat Intelligence Blog | Shreshta\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-17T20:55:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-30T09:07:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/bruno-kelzer-LvySG1hvuzI-unsplash-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1440\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Swapneel Patnekar\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@shreshtait\" \/>\n<meta name=\"twitter:site\" content=\"@shreshtait\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Swapneel Patnekar\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/\"},\"author\":{\"name\":\"Swapneel Patnekar\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/person\\\/9193d733c00e1d16e59261d57c852484\"},\"headline\":\"Online Shopping frauds in India\",\"datePublished\":\"2024-01-17T20:55:11+00:00\",\"dateModified\":\"2025-09-30T09:07:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/\"},\"wordCount\":1129,\"publisher\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/bruno-kelzer-LvySG1hvuzI-unsplash-scaled.jpg\",\"keywords\":[\"1mg\",\"Croma\",\"DMart\",\"flipkart\",\"india\",\"JioMart\",\"phishing\",\"Tata\",\"threat intelligence\"],\"articleSection\":[\"Scam\",\"Threat Intelligence\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/\",\"name\":\"Online Shopping frauds in India\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/bruno-kelzer-LvySG1hvuzI-unsplash-scaled.jpg\",\"datePublished\":\"2024-01-17T20:55:11+00:00\",\"dateModified\":\"2025-09-30T09:07:55+00:00\",\"description\":\"Shreshta threat intelligence team has detected online shopping frauds in India targeting Flipkart, Amazon, Tata Croma, Tata 1mg.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/#primaryimage\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/bruno-kelzer-LvySG1hvuzI-unsplash-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/bruno-kelzer-LvySG1hvuzI-unsplash-scaled.jpg\",\"width\":2560,\"height\":1440,\"caption\":\"Empty shopping cart\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2024\\\/01\\\/online-shopping-frauds-in-india\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Online Shopping frauds in India\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\",\"name\":\"DNS Security &amp; Threat Intelligence Blog | Shreshta\",\"description\":\"DNS Security &amp; Threat Intelligence\",\"publisher\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\",\"name\":\"Shreshta IT Technologies Pvt. Ltd.\",\"alternateName\":\"Shreshta\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Shreshta.svg\",\"contentUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Shreshta.svg\",\"width\":330,\"height\":76,\"caption\":\"Shreshta IT Technologies Pvt. Ltd.\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/shreshtait\",\"https:\\\/\\\/infosec.exchange\\\/@shreshta\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/shreshta\\\/\"],\"description\":\"DNS security and threat intelligence company providing real-time threat protection for organizations worldwide. Our solutions include DNS Shield (Protective DNS), DNS Watchtower (Passive DNS), and comprehensive threat intelligence feeds. Trusted by enterprises to detect, prevent, and investigate cyber threats at the DNS layer.\",\"email\":\"sales@shreshtait.com\",\"legalName\":\"Shreshta IT Technologies Pvt. Ltd.\",\"foundingDate\":\"2014-01-22\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"11\",\"maxValue\":\"50\"},\"publishingPrinciples\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/blog\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/person\\\/9193d733c00e1d16e59261d57c852484\",\"name\":\"Swapneel Patnekar\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g\",\"caption\":\"Swapneel Patnekar\"},\"sameAs\":[\"https:\\\/\\\/shreshtait.com\\\/blog\"],\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/author\\\/pswapneel\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Online Shopping frauds in India","description":"Shreshta threat intelligence team has detected online shopping frauds in India targeting Flipkart, Amazon, Tata Croma, Tata 1mg.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/","og_locale":"en_US","og_type":"article","og_title":"Online Shopping frauds in India","og_description":"Shreshta threat intelligence team has detected online shopping frauds in India targeting Flipkart, Amazon, Tata Croma, Tata 1mg.","og_url":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/","og_site_name":"DNS Security &amp; Threat Intelligence Blog | Shreshta","article_published_time":"2024-01-17T20:55:11+00:00","article_modified_time":"2025-09-30T09:07:55+00:00","og_image":[{"width":2560,"height":1440,"url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/bruno-kelzer-LvySG1hvuzI-unsplash-scaled.jpg","type":"image\/jpeg"}],"author":"Swapneel Patnekar","twitter_card":"summary_large_image","twitter_creator":"@shreshtait","twitter_site":"@shreshtait","twitter_misc":{"Written by":"Swapneel Patnekar","Est. reading time":"15 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/#article","isPartOf":{"@id":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/"},"author":{"name":"Swapneel Patnekar","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/person\/9193d733c00e1d16e59261d57c852484"},"headline":"Online Shopping frauds in India","datePublished":"2024-01-17T20:55:11+00:00","dateModified":"2025-09-30T09:07:55+00:00","mainEntityOfPage":{"@id":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/"},"wordCount":1129,"publisher":{"@id":"https:\/\/shreshtait.com\/blog\/#organization"},"image":{"@id":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/#primaryimage"},"thumbnailUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/bruno-kelzer-LvySG1hvuzI-unsplash-scaled.jpg","keywords":["1mg","Croma","DMart","flipkart","india","JioMart","phishing","Tata","threat intelligence"],"articleSection":["Scam","Threat Intelligence"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/","url":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/","name":"Online Shopping frauds in India","isPartOf":{"@id":"https:\/\/shreshtait.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/#primaryimage"},"image":{"@id":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/#primaryimage"},"thumbnailUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/bruno-kelzer-LvySG1hvuzI-unsplash-scaled.jpg","datePublished":"2024-01-17T20:55:11+00:00","dateModified":"2025-09-30T09:07:55+00:00","description":"Shreshta threat intelligence team has detected online shopping frauds in India targeting Flipkart, Amazon, Tata Croma, Tata 1mg.","breadcrumb":{"@id":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/#primaryimage","url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/bruno-kelzer-LvySG1hvuzI-unsplash-scaled.jpg","contentUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2024\/01\/bruno-kelzer-LvySG1hvuzI-unsplash-scaled.jpg","width":2560,"height":1440,"caption":"Empty shopping cart"},{"@type":"BreadcrumbList","@id":"https:\/\/shreshtait.com\/blog\/2024\/01\/online-shopping-frauds-in-india\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/shreshtait.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Online Shopping frauds in India"}]},{"@type":"WebSite","@id":"https:\/\/shreshtait.com\/blog\/#website","url":"https:\/\/shreshtait.com\/blog\/","name":"DNS Security &amp; Threat Intelligence Blog | Shreshta","description":"DNS Security &amp; Threat Intelligence","publisher":{"@id":"https:\/\/shreshtait.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/shreshtait.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/shreshtait.com\/blog\/#organization","name":"Shreshta IT Technologies Pvt. Ltd.","alternateName":"Shreshta","url":"https:\/\/shreshtait.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/03\/Shreshta.svg","contentUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/03\/Shreshta.svg","width":330,"height":76,"caption":"Shreshta IT Technologies Pvt. Ltd."},"image":{"@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/shreshtait","https:\/\/infosec.exchange\/@shreshta","https:\/\/www.linkedin.com\/company\/shreshta\/"],"description":"DNS security and threat intelligence company providing real-time threat protection for organizations worldwide. Our solutions include DNS Shield (Protective DNS), DNS Watchtower (Passive DNS), and comprehensive threat intelligence feeds. Trusted by enterprises to detect, prevent, and investigate cyber threats at the DNS layer.","email":"sales@shreshtait.com","legalName":"Shreshta IT Technologies Pvt. Ltd.","foundingDate":"2014-01-22","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"},"publishingPrinciples":"https:\/\/shreshtait.com\/blog\/blog\/"},{"@type":"Person","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/person\/9193d733c00e1d16e59261d57c852484","name":"Swapneel Patnekar","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g","caption":"Swapneel Patnekar"},"sameAs":["https:\/\/shreshtait.com\/blog"],"url":"https:\/\/shreshtait.com\/blog\/author\/pswapneel\/"}]}},"_links":{"self":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/4979","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/comments?post=4979"}],"version-history":[{"count":224,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/4979\/revisions"}],"predecessor-version":[{"id":7897,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/4979\/revisions\/7897"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/media\/5195"}],"wp:attachment":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/media?parent=4979"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/categories?post=4979"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/tags?post=4979"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}