Infoblox Threat Intel has linked a global wave of mobile banking fraud to scam compounds in Cambodia, affecting users in at least 21 countries.
Working with Vietnamese non-profit Chong Lua Dao, researchers identified an Android banking trojan likely operated from several locations, including the K99 Triumph City compound in Cambodia. The UN and others have previously linked that site to large-scale scams and forced labour.
The operation came to light after a rise in unusual DNS traffic across Infoblox customer networks led researchers to what they described as a previously undocumented malware-as-a-service platform. The service appears to register about 35 new domains each month to imitate banks, social security agencies, tax authorities, utilities and law enforcement bodies.
The infrastructure targeted users in at least 21 countries, with the heaviest activity in Indonesia,…
Refuse to download remote-access software like AnyDesk or TeamViewer if a “technical support” caller claims your computer is infected with a virus, as this gives them total control over your device.