At Mirakl, we're committed to maintaining the highest standards of security and trust for our customers and partners. Today, we want to alert our community that our security team discovered several fraudulent websites impersonating Mirakl's brand identity. Malicious actors have created convincing replicas of Mirakl's online presence on various websites in an attempt to deceive users and steal money from them.
Example of a fake website
Attackers are probably recruiting their targets through direct messages on platforms such as WhatsApp or Telegram.
The pattern of domains used by malicious actors exploit the Mirakl name plus a combinaison of keywords (such as work, inc, global, pro, vip, etc.).
Please note, these malicious actors are creating new domains frequently, with variations on the name, so the list above is not comprehensive.
We’ve also been alerted on fake recruitment offers, communicated through Teams or other direct messaging systems. Mirakl recruiters will never reach out to candidates using non-corporate addresses or about jobs not posted on our Careers page (/careers).
Immediate actions taken
Upon discovery, our security team:
- Immediately initiated takedown procedures for the fraudulent domains.
- Reported the site to relevant cybersecurity authorities.
- Documented evidence of the impersonation for legal action.
- Enhanced monitoring systems to detect similar attempts in the future.
Protecting yourself
As we combat these malicious activities, we encourage all users to remain vigilant:
- Verify website addresses carefully — Mirakl's official websites include the domains mirakl.com, mirakl.net (opens in a new tab), and miraklconnect.com (opens in a new tab).
- Mirakl teams will only reach out to you from official Mirakl email addresses, ending in mirakl.com or mirakl.net (opens in a new tab).
- Be suspicious of unexpected offers — Legitimate businesses don't typically ask you for money in exchange for potential future payments.
- Check for security indicators — Look for HTTPS and security certificates.
- Never provide financial information to websites you haven't thoroughly verified.
- Report suspicious activity directly to Mirakl's security team at security@mirakl.com.
Our commitment
Mirakl remains dedicated to protecting our brand integrity and ensuring the security of our ecosystem. We will continue to take swift action against any attempts to impersonate our company or services.
While we've addressed this specific threat, the landscape of online scams continues to evolve. We appreciate your partnership in maintaining vigilance and protecting our community.
For additional information about identifying legitimate Mirakl communications or to report suspicious activity, please contact security@mirakl.com.
