Cybercriminals are using carding bots to test the validity of the stolen card data before carrying out fraudulent transactions or selling them during the holiday shopping season. Experts at PerimeterX observed a spike in malicious traffic before the holiday season, in some cases it has increased to over 700% since September. The second carding bot, dubbed the shortcut bot, exploits the card payment vendor APIs used by a website or mobile app and bypasses the e-commerce website entirely. The bot was attempting to mimic human behavior, it was creating a shopping cart, then it was adding products to it, and also providing shipping information.”]
Source: https://securityaffairs.co/wordpress/93987/cyber-crime/carding-bots-holiday-seasons.html