In recent developments, an international law enforcement initiated an operation and seized the website and domains for WT1SHOP. WT1SHOP is a criminal market hub, which houses stolen credit cards, I.D. cards, and millions of login credentials for sale. 

The U.S Attorney’s Office of the District of Maryland and the FBI, who stated the activities of the sites, jointly conducted the operation. 

According to reports, WT1SHOP facilitated a large marketplace for PII data, one of the largest in the context. Threat actors usually use PII data to buy credentials to take over accounts, credit cards to facilitate online purchases and government I.D. cards for identity theft. 

According to a statement by Vitali Kremez, CEO of AdvIntel, ever since Slilpp takedown, the WTSHOP has been one of the turnkey account shop, which sells compromised accounts and personally identifiable information.

The market hub mainly catered to carders and fraudsters who focused on taking over account activity and providing its service on many underground crime communities. 

WT1SHOP representatives recently initiated promotional activities of their organization on Russian hacking forums and Reddits, which catered to cyber-crime activity. 

According to reports, Portuguese authorities seized WT1SHOP’s website, while the U.S seized as many as four Internet domains, which facilitated access to the marketplace. This includes wt1shop.net, wt1store.cc, wt1store.com, wt1store.net. 

The post International law enforcement operation seized website and domains of WT1SHOP, a widely used criminal marketplace appeared first on The Tech Outlook.

A call center network operated by a gang of cybercriminals dismantled by the National Police of Ukraine, that posed as a service to assist bitcoin scam victims in recovering their stolen goods while really committing the fraud against them. These unlawful contact centres’ con artists are also accused of defrauding EU and Ukrainian individuals who intended to invest in commodities including gold, oil, equities, and cryptocurrencies.

Throughout this global fraud operation, they used cutting-edge technology and software to mimic the phone numbers of state financial organizations.
According to the NPU, it was determined during the investigation that the contact center employees impersonated employees of these state banking institutions and demanded personal information from customers’ bank cards.

The attackers appeared to be members of a so-called “Community of cryptocurrency brokers” and used the contact information of prior victims of other cryptocurrency scammers to trick them into believing they could assist them in recovering their stolen assets in exchange for a “commission.” However, they cut off communication after deceiving the victim into transferring the money to accounts under the attacker’s control.

Ukrainian law enforcement officials confirmed these criminal acts after being granted access to the locations of several “call centers” linked to this cybercrime operation and the seizure of computer hardware, mobile phones, and data records.
Those involved in this fraud operation who are under investigation for fraud, use of malicious software, and membership in an organized criminal gang may receive a 12-year prison sentence.

They used VoIP (Voice over Internet Protocol) phone lines to conceal their real location while scamming hundreds of foreign investors. The U.S. Federal Trade Commission (FTC) reported that more than $80 million was lost to cryptocurrency investment scams last year, based on roughly 7,000 reports collected since October 2020.

Owners of cryptocurrencies have been cautioned by the Federal Bureau of Investigation (FBI) against con artists actively seeking virtual assets over the phone while assuming the identity of support staff for cryptocurrency exchanges or payment platforms.

In September 2021, the Security Service of Ukraine (SBU) also destroyed a network of contact centers in Lviv that was linked to a gang of scammers that preyed on bitcoin investors all over the world.

The post A call center network operated by a gang of cybercriminals dismantled by the National Police of Ukraine appeared first on The Tech Outlook.

Recently researchers discovered a gigantic network of more than 11,000 domains involved in fake investment scheme promotions. This network used to promote many fake investment schemes to users in Europe. 

The platforms were seen containing enriched and false celebrity endorsements. The culprits used this to justify their legitimacy and consequently lure in victims. 

The operation’s goal is to trick users into getting involved in a high-return investment opportunity. Additionally the operators try to convince them to deposit a minimum amount of 250 EUR ($255) to sign up for the fake services. 

Researchers at the Group-IB, a cybersecurity company discovered this operation. They succeeded in mapping a large network that included phishing sites, content hosts and redirections. Group-IB asserted that more than 5,000 of the identified malicious domains are still active and running. 

The countries that the operation targeted so far comprises of the UK, Belgium, Germany, the Netherlands, Portugal, Poland, Norway, Sweden and the Czech Republic. 

The fraudsters promotes their campaigns in various social media platforms as traps for targets. Victims who ends up clicking on the ads to learn more are redirected to pages that showcases alleged success stories. 

After that, the fraudsters requests contact details and is followed by a “customer agent” call. Eventually the victim is convinced to execute the deposit and the details received on the fake site are stored for future campaigns or resold to the dark web. 

The post Network of 11,000 fake domains targets Europe with fake investment schemes appeared first on The Tech Outlook.