Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Cumulative record leaks reach new heights, highlighting growing cyber ...
Fraudsters and cybercriminals tap AI for more sophisticated spam and B...
Five essential strategies for securing multi-cloud environments
Windows 10 users to enjoy a one-year reprieve from forced upgrade
How ready are global organizations to navigate autonomous AI securely,...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Solving data protection challenges in an era of cloud and AI

      Solving data protection challenges in an era of cloud and AI

      Wednesday, June 18, 2025, 11:12 AM Asia/Singapore | Data Protection, Features
    • Featured

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Thursday, May 29, 2025, 5:04 PM Asia/Singapore | Features
    • Featured

      How the UAE proactively protects its digital economy

      How the UAE proactively protects its digital economy

      Monday, May 19, 2025, 2:16 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

LOGIN REGISTER
  • Features
    • Featured

      Solving data protection challenges in an era of cloud and AI

      Solving data protection challenges in an era of cloud and AI

      Wednesday, June 18, 2025, 11:12 AM Asia/Singapore | Data Protection, Features
    • Featured

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Thursday, May 29, 2025, 5:04 PM Asia/Singapore | Features
    • Featured

      How the UAE proactively protects its digital economy

      How the UAE proactively protects its digital economy

      Monday, May 19, 2025, 2:16 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning
News

How two threat groups have been orchestrating large-scale scams

By CybersecAsia editors | Monday, May 5, 2025, 10:18 AM Asia/Singapore

How two threat groups have been orchestrating large-scale scams

Threat research has delved into their modus operandi involving two pathways: evasive social media investment scams and news spoofing and falsification.

On 29 April 2025, a network cybersecurity firm announced the identification of two cybercriminal groups that have been orchestrating large-scale scams using registered domain generation algorithms (RDGAs).

These groups employ automated techniques to create and register vast numbers of domains, leveraging well-known names and brands to make their campaigns appear credible and trustworthy.

By algorithmically generating and registering large volumes of domains, these two threat groups can complicate detection and blocking efforts. The domains are used for scams, phishing, malware, and spam, necessitating advanced security measures to defend against evolving threats.

Threat group profiles

The first group has been identified as operators of social media investment scams:

  • Facebook ads are used to promote fraudulent investment platforms. Campaigns often feature fake celebrity endorsements and thousands of domains to evade detection.
  • The malicious domains are configured so that any subdomain query returns a response, creating noise in DNS and making it difficult to identify which subdomains are actively used for scams.
  • This threat group targets victims in Australia, New Zealand, and Taiwan, using localized content to increase the plausibility of their scams.
  • The success of these investment scams often relies on creating a sense of urgency and sense of missing out.

The second group has been identified as operators of cloaking and spoofing services:

  • Employing own cloaking service to perform validation checks on users, this threat group primarily target victims in Eastern Europe, impersonating real local news websites or prominent brands.
  • Real news websites or major brands are spoofed by the group websites, such as Russian news sites or messaging platforms, to lure victims.
  • This group uses constantly changing URL paths for scam landing pages, making them more difficult to trace.

According to Infoblox, the firm that disclosed its threat intelligence to the authorities, because the two groups of criminals use DNS exploitation for their campaigns, defenders can use DNS as a key element for security. Automated detection and correlation of scam domains at scale are important for effective defense. Preventing access to fake media and platforms using protective DNS services with robust threat intelligence can also help.

Share:

PreviousWith Q1 2025 over, research teams fine-tune their cyber predictions for the rest of the year
NextNew disinformation trend: Widespread fabrication or recycling of victim claims by ransomware groups  

Related Posts

Phishing campaign targets Indonesian Instagram users and banking customers

Phishing campaign targets Indonesian Instagram users and banking customers

Wednesday, March 29, 2023

Manufacturers take note: IoT harbors the most undetectable cybersecurity gaps

Manufacturers take note: IoT harbors the most undetectable cybersecurity gaps

Friday, October 18, 2024

Ransomware targeting SEA SMEs actually dropped in 2020: report

Ransomware targeting SEA SMEs actually dropped in 2020: report

Wednesday, April 21, 2021

Stopping COVID-19 – and fake news – without vaccines

Stopping COVID-19 – and fake news – without vaccines

Monday, April 13, 2020

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • St Luke’s ElderCare enhances operations and capabilities through a centralized secure, scalable network

    St Luke’s ElderCare enhances operations and capabilities through a centralized secure, scalable network

    With only a small IT team, the digital transformation has united operations across 30 locations, …Read more
  • Automating border control and security with facial recognition technology

    Automating border control and security with facial recognition technology

    Indonesia Immigration & Seaport Authorities enhances security and speeds up border control queues at Batam …Read more
  • Securing wealth advisory services without unnecessary friction: Endowus

    Securing wealth advisory services without unnecessary friction: Endowus

    The wealth advisory platform demonstrates its non-negotiable commitment to a robust security posture through partnering …Read more
  • LifeTech group sets up next-gen security operations center in Malaysia

    LifeTech group sets up next-gen security operations center in Malaysia

    By partnering with a unified cybersecurity platform, the firm will be offering cost-effective advanced SOC …Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.