One Article Review
| Source |  ProofPoint |
|---|---|
| Identifiant | 8602748 |
| Date de publication | 2024-10-28 08:26:44 (vue: 2024-10-28 10:06:46) |
| Titre | Les bouchers de porc se joignent à l'économie des concerts: les escrocs de crypto-monnaie ciblent les demandeurs d'emploi Pig Butchers Join the Gig Economy: Cryptocurrency Scammers Target Job Seekers |
| Texte | Key takeaways Proofpoint has observed an increase in cryptocurrency fraud that impersonates various organizations to target users with fake job lures. Researchers assess with high confidence this fraud is conducted by actors who conduct Pig Butchering, or romance-based cryptocurrency investment fraud. The job fraud has smaller but more frequent returns for the fraudsters compared to Pig Butchering. The activity leverages popular brand recognition in place of a long, romance-based confidence scam. The activity uses a flexible platform to tailor the scam to a variety of lure types. The activity is initiated through social media, SMS and messaging apps like WhatsApp and Telegram. Overview For years, Pig Butcher scammers have swindled victims out of billions of dollars. Typically, they lure victims in with long-winded confidence scams that eventually direct victims to a fake cryptocurrency investment platform. Once a target\'s initial small investment starts turning into a large (but fake) “profit,” the scammers pressure the victim to invest vast sums of money. Once the victim\'s money leaves their digital wallet, the unrealized gains are replaced with a sinking realization-they have lost everything. While quite profitable for the pig butchers, these scams take a long time and offer many opportunities for the victim to realize something might be off. For this business model to be successful, they need to target victims with money to lose. This leaves a large market of financially insecure victims-that provide the scammers with smaller payout, but a larger pool of people-virtually untapped. Recently, however, Proofpoint observed these types of fraudsters launch a new business venture to tap into this market: job scamming. In June 2024, the U.S. Federal Bureau of Investigation published a public service announcement warning the public of these fraudulent job scams originating on mobile devices. Job duties may include The scam typically begins with an unsolicited message on a social media platform or other messaging application, like SMS, WhatsApp, Telegram, etc. It starts out like a typical job recruiter message (see Figures 1 and 2). They specifically highlight the job as a work from home (WFH) opportunity. Despite recent pushes for return to office (RTO), remote jobs remain very popular with job seekers. Figure 1: Fake Glassdoor recruiter. The fraudster then launches into a brief description of the company “work platform.” The specific job and brand impersonation can vary quite a bit from boosting popular music streams on Spotify to reviewing fake TikTok Shop products and services, or even giving hotel reviews. Essentially click farming. Figure 2: Hotel ratings job scam pitch. Once the target agrees to take the job, the threat actor instructs them to register on a website, which is malicious. To register, the target is given a referral code. The page content is not viewable unless a user is registered. This makes surfacing and taking down these websites slightly more challenging for defenders, as domain takedown requests often require a substantial amount of evidence. Luckily, Emerging Threats was up to the challenge and has developed signatures to identify these new job scam sites. Figure 3: Directions to register. After the victim has registered with the site, the job scammer-or “handler”-will ask that the target shares a screenshot of their profile page so they can create a training account. Figure 4. Request to share screenshot of profile page. Gotta spend money to lose money Once the training account has been created, the fraudster will instruct the recipient on how to perform their job function. This part will vary a bit depending on the platform theme-like submitting product or service reviews, placing product orders or booking hotels-but the core characteristics are the sa |
| Notes | ★★★ |
| Envoyé | Oui |
| Condensat | $100 $23 $275 $300 $70 $80 $95 figure knowledge 000 05 05 0x2e65f3e0492e0a429d897521597bcc7ec1cc4c9d 0x3d2c12420d829d8afc166c1632a4c54e7798f4fd 0x3d2c12420d829d8afc166c1632a4c54e7798f4fd: 0x404c7c72e8869af9c617ad428fd2d2652f1cf298 130 1m7kup94pv5dy7spfyt5zfexuenczdhg1t 1y1m 2024 203 2055539 2055540 2055541 2055542 2055543 2055544 362 3k2t5guzrzrbyvvc1luhukrj5ltkgjf7mv 3k2t5guzrzrbyvvc1luhukrj5ltkgjf7mv: 3pz1hqatmdncvuwuqayfrlyxortmxres85 3pz1hqatmdncvuwuqayfrlyxortmxres85: 80+ abandon able about absurd accessing according account across active activity actor actors adage: added additional additionally address addresses advance aff affiliated after again against agency agent agrees ai albumsdata all alleged allow allowed allows alluring along also amazon668 amount amounts announcement any apm app appears appendix: application apps aprimo are argoshop ask asked assess assist associated association assume assuming atom attempted attentivedata aversion aversion away back balance bandcampmusicalbumsseo bandcamponlinemusicmkt bandcampwebplayer bands based bc1qg9sz72jg3mptpmmqavjmqwq4dm3j5txpk0w0fu bc1qg9sz72jg3mptpmmqavjmqwq4dm3j5txpk0w0fu: bean beatportmusicdosgp because become been begins behavioral being believe below better between billions bit bitcoin bleepmusicspace bleepwebplayer bloomhouse bloomingdales bloomingdalesseo bob bonus” booking bookings boom boomplaypromohub boomplaypromotions boosting brag brand brandasticdata brief bring brings btc btc building buildingbrandsdos buildingbrandsmkt bureau business but butcher butchering butchers button buy0tw call can canada capitolmusicgroupboost capitolmusicpromohub capitolmusicpromotions capitolmusicwebplayer capitolrecords case cbccentenr cc centralinvest centralmakermoney centralmarketing centuries chainalysis chainalysis: challenge challenging characteristics chart chat chats check cinkasuwashop claims clear clicdata click clicking climb club clutch clutchppc co code collaboration colleagues com com com commerce commission commissions companies company company compared completed compromise computer concept concerned conclusion conduct conducted confederates confidence content continue convince core cost could countries couple create created credential cryptocurrency cubix cubixclickworker cubixdatagp cubixdosllc cycle cyou danger daptone daptonemusicclub daptonerecordsgrouppromo daptonerecordsmusicalbums daptonerecordsppcgp daptonerecordspromohub daptonerecordspromotions daptonespace data datagp dataintelligenceoptimal datarioks datasolustar day days dayuse decided deezer deezermusicdatappc defenders depending deposits description description designated desires despite details devcommedia26 developed devices digital digitals direct directed directions does doing dollars domain domains domains dominoamusellc dominomusicdosllc dominomusicgp dominomusicgrouphub dominomusicpcpllc dominomusicpromotions dominomusicwebplayer done dos dosmylighthouse down during duties earned easily easy ebaydatagp ebayseollc economy: edifiandosgp edifianpcpinc edifianppcllc edifianseollc effective effort eintelligencejob eintelligencepcp email emerging emotions employees employer emu emubandsmusicspace emusic encounter encountered engineering enough equipment equivalent error especially essentially etc eth eth ethereum even event eventually everything evidence example examples explain explains explanation extremely factors fake fall fallacy fallacy family farming favor fear federal fee feeling feels fighting figure figures fill financially findings first flexible flow following following: for: fraud fraudster fraudsters fraudulent frequent frequently friends from fueled function funds gains gaslight gather geniusmusicalbumsdata geniusmusicplayer get ghost gig give given giving glance glassdoor global going good goods gotta gr0 great group groups gummicube |
| Tags | Threat Mobile |
| Stories | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.