Forest Global Training Partners

Cyber Risks · Krebs on Security

Phishing Sites Targeting Scammers and Thieves

Summary: Phishing sites impersonating BriansClub, an underground carding shop, are collecting Bitcoin deposits from would-be criminals who never receive the stolen-card balance they paid for. One fake domain, BriansClub[.]com, took in more than a thousand payments over five months totaling over $40,000, while a related wallet at BriansClub[.]org logged 704 transactions worth $38,000 over ten months.

Why it matters: The scheme works because victims cannot report it: nobody who loses money to a fake carding site will go to authorities, so the operators keep collecting with no consequence. A security leader should note that the same impersonation playbook - a lookalike domain, a copied payment flow, a trusted brand name - is what these actors use against legitimate businesses, where the losses do get reported.

Read the original at Krebs on Security ↗

Topics
Fraud & Scams
Related