The 16Shop phishing kit distribution network has expanded its portfolio with new templates that target PayPal and American Express users. 16Shop is a sophisticated, commercial product that validates licenses in real-time and comes with code-level protection against making copies. In early January, security researchers from ZeroFox obtained a PayPal phishing. kit from 16Shop and learned that a template for American Express also exists. Among the data it steals are login credentials, payment card details (owner’s name, expiration date, bank name, number, security code), and billing address with personally identifiable details.
Source: https://www.bleepingcomputer.com/news/security/paypal-american-express-phishing-kits-added-to-16shop-service/