The unattributed activity employs a sophisticated approach to steal data and monitor targets, researchers say.

Digital scams looking to steal data and dollars from World Cup fans are in full force as the tournament enters week two.

Using two malware variants, unknown operators managed to compile stolen card data potentially worth more than $3 million, researchers said.

The group is believed to have hit more than 50,000 victims.

The operation — with help from Palo Alto Networks' Unit 42 as well as cybersecurity firm Group-IB — marks the second action against the group.

The illicit carding market stands at $1.4 billion, researchers say, compared to $1.9 billion last year.

RedCurl's latest victims include one of Russia's largest wholesale companies.

The case appears to be the latest example of Russian authorities taking legal action against a prominent technology executive.

The law enforcement action focused on an organization that sells phishing services to less-skilled crooks.

Swarmshop and Carding Mafia were victimized in March.