Recent investigations by Silent Push Threat Analysts revealed a significant phishing e-commerce scam targeting consumers during "Hot Sale 2025," an event akin to Black Friday in the United States. This campaign, initially tipped by Mexican journalist Ignacio Gmez Villaseor, expanded beyond Mexico, identifying a series of fraudulent websites aimed at both English and Spanish-speaking customers globally. The analysis indicated that the threat actor group behind this operation likely originates from China, as evidenced by a unique technical fingerprint discovered in the campaign's infrastructure, which contains Chinese characters.