InfoHawk finds 820 suspicious domains impersonating restaurant brands

InfoHawk identified 820 suspicious domains impersonating 35 restaurant brands, with some capturing payment card details and asking customers for their bank's SMS verification codes. Its early-November investigation found that 808 of the domains used the .delivery suffix. One site imitating Jersey Mike's retrieved genuine restaurant pages and presented them under an attacker-controlled domain while replacing the checkout payment form. This approach can reproduce a familiar ordering experience without compromising the restaurant's own website. Obtaining a bank verification code alongside card details could help attackers authorize fraudulent transactions, depending on how the bank uses the code.