Introduction
During an investigation into phishing activity targeting users across the Middle East and North Africa (MENA), Group-IB analysts identified multiple fraudulent Facebook accounts impersonating politicians, public figures, and trusted organizations. These accounts promoted fake offers, including free mobile internet packages, financial compensation, and government subsidy programs. Victims were encouraged to click embedded links to claim the advertised benefits, but were instead redirected through a chain of intermediary websites that ultimately led to phishing and traffic monetization infrastructure.
A deeper analysis of the underlying infrastructure revealed that these campaigns were not isolated incidents. By bypassing multiple layers of traffic cloaking and tracing the campaign’s telemetry, Group-IB researchers identified the centralized platform powering the…
Identity theft is the “foundational” fraud upon which many other crimes are built. It involves the unauthorized acquisition and use of a person’s personal identifying information (PII), such as an ID number, Social Security number, or passport details.
- How it works: Fraudsters obtain PII through data breaches, mail theft, or “social engineering” (tricking people into revealing details). Once they have this data, they can open new bank accounts, apply for credit cards or loans, and even receive medical treatment under your name.
- Synthetic Identity Fraud: A sophisticated variation where criminals combine real and fabricated information to create a completely new, “synthetic” person. This is particularly difficult to detect because there is no single victim to report the suspicious activity initially.