• Menu
  • Skip to main content
  • Skip to primary sidebar

The Cyber Security News

Latest Cyber Security News

Header Right

  • Latest News
  • Vulnerabilities
  • Cloud Services
Cyber Security News

Cyber-criminals Scammed Each Other Out of Millions in 2022

You are here: Home / General Cyber Security News / Cyber-criminals Scammed Each Other Out of Millions in 2022
December 8, 2022

Cyber-criminals have lost at the very least $2.5m to scammers on just 3 underground web pages in the previous 12 months, according to Sophos.

The UK-based security vendor claimed that this “sub-financial state,” in which cyber-criminals properly defraud each individual other, has turn into large small business.

In the initial element of its new report, The scammers who rip-off scammers on cybercrime community forums, Sophos senior menace researcher, Matt Wixey, claimed that the trouble is now so acute that discussion board admins have established devoted “arbitration rooms.”

✔ Approved From Our Partners
AOMEI Backupper Lifetime

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code


“Personal beefs, rivalries and seeking to destroy (or sometimes enrich) reputations can all consequence in frauds. And it is not just little-time crooks. We saw outstanding menace actors both accused of scamming or slipping target to cons on their own,” Wixey continued.

“We observed referral disadvantages, phony information leaks and instruments, typosquatting, phishing, ‘alt rep’ frauds (the use of sockpuppets to artificially inflate standing scores), bogus guarantors, blackmail, impersonated accounts and backdoored malware. We even identified occasions exactly where menace actors received revenge by scamming the scammers who ripped off them.”

The report looked at 3 well known underground internet sites: Exploit and XSS, two Russian-language cybercrime discussion boards that deliver access-as-a-company (AaaS) listings, and the English language BreachForums, which specializes in info leaks.

About 12 months, Sophos investigated 600 cons passing via arbitration on these web sites, with claims ranging from $2 to $160,000.

Wixey argued that examining these disputes is a practical way to glean perception into cyber-criminals’ tactical and strategic priorities, rivals and alliances, and their susceptibility to deception.

“Threat actors are knowledgeable that legal message boards are monitored, and so often hire superior operational security. When they are victims of crime them selves – well, not so significantly,” he extra.

“Because discussion board regulations demand from customers evidence to aid fraud allegations, wronged danger actors will typically happily submit screenshots of private conversations and resource code, identifiers, transactions, chat logs, and blow-by-blow accounts of negotiations, gross sales, and troubleshooting.”

Occasionally scammers develop overall faux websites. Wixey claimed his investigate uncovered one group which built 20 imitation web sites, like a person that spoofed the well-known Genesis Marketplace. The ruse was to trick fascinated functions into handing over a $100 ‘activation fee’ to participate.


Some areas of this write-up are sourced from:
www.infosecurity-journal.com

Previous Post: «google warns of internet explorer zero day vulnerability exploited by scarcruft Google Warns of Internet Explorer Zero-Day Vulnerability Exploited by ScarCruft Hackers
Next Post: Investment Fraud Gang May Have Made $500m Cyber Security News»

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Report This Article

Recent Posts

  • BREAKING: 7,000-Device Proxy Botnet Using IoT, EoL Systems Dismantled in U.S. – Dutch Operation
  • OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft Capabilities
  • Initial Access Brokers Target Brazil Execs via NF-e Spam and Legit RMM Trials
  • Deploying AI Agents? Learn to Secure Them Before Hackers Strike Your Business
  • Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials
  • Beyond Vulnerability Management – Can You CVE What I CVE?
  • Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android
  • Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell
  • 38,000+ FreeDrain Subdomains Found Exploiting SEO to Steal Crypto Wallet Seed Phrases
  • SonicWall Patches 3 Flaws in SMA 100 Devices Allowing Attackers to Run Code as Root

Copyright © TheCyberSecurity.News, All Rights Reserved.