Group-IB, an information security company, has discovered 140 resources that, under the guise of live broadcasts of the Beijing Winter Olympics, redirect users to fraudulent and phishing sites, according to a press release received.
It is noted that the attackers posted announcements of illegal broadcasts on the hacked pages of various sites. Most of the dangerous resources are already blocked. In total, 289 sites could potentially be involved in the scheme. Experts called Kinohoot the largest network, which includes more than a hundred resources. It is known that its owner started registering domains back in 2019 and “participated” in the 2020 Summer Olympics in Tokyo. Then CERT-GIB specialists found 120 similar resources created for conducting fraudulent live broadcasts.
On such sites, the visitor is offered to participate in the drawing of free access to broadcasts, for which you need to open one of the 12 "boxes". The user is given three attempts to find the prize. After two unsuccessful attempts, the third is the prize. The amount of fake winnings can range from $10 (about 747 rubles) to $10 thousand (about 747 thousand rubles).
After “winning”, the victim must agree to receive the winnings and pay a small conversion fee of about 300-500 rubles, which requires entering bank card details on a phishing resource. As a result, users will not receive any cash prizes or access to online broadcasts, but will only lose money, experts warn.
“The Internet scam “Boxes” has been known for a long time, but scammers constantly adjust their schemes to popular or significant events in the world and, of course, use freshly registered domains for this. In this scheme, in order to gain confidence in the victim, the redirect is often placed on legitimate hacked sites, such as universities, charitable foundations and non-profit organizations,” said Alexander Kalinin, head of CERT-GIB.
Group-IB experts recommend that you follow the sports competitions of the Olympic Games exclusively on official resources, be wary of "promotions" and "draws", and do not enter information about bank cards and personal data on suspicious sites.
Previously, I told you should not trust secure email services.
bbabo.Net