An established group that steals data through phishing and card-skimming is using new infrastructure and activities to generate revenue, the security firm RiskIQ says, adding that it has named the group Fullz House based on its operations.

A cyber crime syndicate known as Magecart, which is made up of dozens of sub-groups that indulge in credit card theft by skimming online payment forms, has been found to be implicated in more than two million such attacks.

Sites that have been decommissioned due to attacks by the card-skimming attack group Magecart are being hijacked and re-used for other malicious activity once they come back online by a secondary group of cyber criminals, the security firm RiskIQ claims.