Asia cross-border fake crypto and forex investment scam campaign
Campaign
Summary
Hide ▲
Show ▼
A current wave of fake crypto and forex investment scams is stealing funds from victims across Asia, using polished trading platforms to look legitimate. The operation reaches targets through social media and messaging apps and is run by organized cross-border groups that coordinate front-end deception with backend money movement. Shared clues such as reused SSL certificates and identical chatbot systems suggest multiple scam operations are linked.
Related Happenings
GitBait phishing campaign targeting Mexican banks
Campaign
H score20
First: 17.06.2026 17:00
Last: 17.06.2026 17:00
Sources 1
About this happening:
A long-running GitBait phishing campaign is stealing banking credentials from customers of Mexican financial institutions, using GitHub Pages and SheetBest to...
GitBait phishing campaign targeting Mexican banks
CampaignAbout this happening: A long-running GitBait phishing campaign is stealing banking credentials from customers of Mexican financial institutions, using GitHub Pages and SheetBest to...
FIFA-themed phishing-as-a-service market selling scam kits and ticket-buying bots
Threat Actor Meta
H score42
First: 05.06.2026 10:01
Last: 05.06.2026 10:01
Sources 1
About this happening:
A FIFA-themed phishing-as-a-service market is selling ready-made scam kits and ticket-buying bots, lowering the barrier for fraud operators and making takedowns less e...
FIFA-themed phishing-as-a-service market selling scam kits and ticket-buying bots
Threat Actor MetaAbout this happening: A FIFA-themed phishing-as-a-service market is selling ready-made scam kits and ticket-buying bots, lowering the barrier for fraud operators and making takedowns less e...
Ghost Stadium FIFA World Cup fraud campaign
Campaign
H score41
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
About this happening:
A Ghost Stadium-linked FIFA impersonation fraud campaign is targeting 2026 FIFA World Cup fans with cloned fifa.com pages, fake ticket and hospitality offers, and...
Ghost Stadium FIFA World Cup fraud campaign
CampaignAbout this happening: A Ghost Stadium-linked FIFA impersonation fraud campaign is targeting 2026 FIFA World Cup fans with cloned fifa.com pages, fake ticket and hospitality offers, and...
MENA fake online job ad fraud campaign
Campaign
H score29
First: 24.12.2025 17:30
Last: 24.12.2025 17:30
Sources 1
About this happening:
A 2025 coordinated fraud campaign used fake online job ads to target people across MENA, stealing money and personal data through recruitment lures. The operat...
MENA fake online job ad fraud campaign
CampaignAbout this happening: A 2025 coordinated fraud campaign used fake online job ads to target people across MENA, stealing money and personal data through recruitment lures. The operat...
UNC2891 multi-year ATM fraud campaign against Indonesian banks
Campaign
H score32
First: 20.11.2025 18:00
Last: 20.11.2025 18:00
Sources 1
About this happening:
UNC2891’s multi-year ATM fraud campaign against two Indonesian banks has been fully exposed, showing a coordinated cash-out operation that used money mules, cloned c...
UNC2891 multi-year ATM fraud campaign against Indonesian banks
CampaignAbout this happening: UNC2891’s multi-year ATM fraud campaign against two Indonesian banks has been fully exposed, showing a coordinated cash-out operation that used money mules, cloned c...
Timeline
-
28.10.2025 18:45 1 articles · 8mo ago
Group-IB maps Asia fake investment scam infrastructure
Technical Analysis UpdateGroup-IB’s High-Tech Crime Investigation team reports a surge in fake investment platforms imitating cryptocurrency and forex exchanges across Asia, with victims lured through social media and messaging apps and scams run by organized cross-border groups using polished trading interfaces and complex backend systems. The analysis highlights shared technical fingerprints, including reused SSL certificates and identical chatbot systems, and outlines the Victim Manipulation Flow and Multi-Actor Fraud Network models to show how operators build trust, coordinate roles, and launder stolen assets. The team recommends that banks, regulators and cybersecurity teams monitor reused infrastructure components and strengthen Know Your Customer (KYC) controls to block fraudulent accounts.
Show sources
- Investment Scams Spread Across Asia With International Reach — www.infosecurity-magazine.com — 28.10.2025 18:45