Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Vietnam Launches NDAChain, the National Blockchain Platform to Acceler...
Elitery a Pioneering MSSP Partner for Google Cloud’s “Indo...
Asia Pacific’s Mobile Sector Adds $950 Billion to GDP; On Track ...
PT Kereta Api Indonesia announces nationwide email and communication o...
Will governments assert stronger oversight over tech giants deemed as ...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      The rising threats and business risks of machine identities

      The rising threats and business risks of machine identities

      Tuesday, July 22, 2025, 12:19 PM Asia/Singapore | Features, IoT Security
    • Featured

      The future of AI-powered cybersecurity

      The future of AI-powered cybersecurity

      Monday, July 21, 2025, 4:04 PM Asia/Singapore | Features, Newsletter, Tips
    • Featured

      Transcending digital disruption: How financial institutions can integrate innovation, security, and agility

      Transcending digital disruption: How financial institutions can integrate innovation, security, and agility

      Thursday, July 10, 2025, 4:16 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

LOGIN REGISTER
  • Features
    • Featured

      The rising threats and business risks of machine identities

      The rising threats and business risks of machine identities

      Tuesday, July 22, 2025, 12:19 PM Asia/Singapore | Features, IoT Security
    • Featured

      The future of AI-powered cybersecurity

      The future of AI-powered cybersecurity

      Monday, July 21, 2025, 4:04 PM Asia/Singapore | Features, Newsletter, Tips
    • Featured

      Transcending digital disruption: How financial institutions can integrate innovation, security, and agility

      Transcending digital disruption: How financial institutions can integrate innovation, security, and agility

      Thursday, July 10, 2025, 4:16 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning
News

How two threat groups have been orchestrating large-scale scams

By CybersecAsia editors | Monday, May 5, 2025, 10:18 AM Asia/Singapore

How two threat groups have been orchestrating large-scale scams

Threat research has delved into their modus operandi involving two pathways: evasive social media investment scams and news spoofing and falsification.

On 29 April 2025, a network cybersecurity firm announced the identification of two cybercriminal groups that have been orchestrating large-scale scams using registered domain generation algorithms (RDGAs).

These groups employ automated techniques to create and register vast numbers of domains, leveraging well-known names and brands to make their campaigns appear credible and trustworthy.

By algorithmically generating and registering large volumes of domains, these two threat groups can complicate detection and blocking efforts. The domains are used for scams, phishing, malware, and spam, necessitating advanced security measures to defend against evolving threats.

Threat group profiles

The first group has been identified as operators of social media investment scams:

  • Facebook ads are used to promote fraudulent investment platforms. Campaigns often feature fake celebrity endorsements and thousands of domains to evade detection.
  • The malicious domains are configured so that any subdomain query returns a response, creating noise in DNS and making it difficult to identify which subdomains are actively used for scams.
  • This threat group targets victims in Australia, New Zealand, and Taiwan, using localized content to increase the plausibility of their scams.
  • The success of these investment scams often relies on creating a sense of urgency and sense of missing out.

The second group has been identified as operators of cloaking and spoofing services:

  • Employing own cloaking service to perform validation checks on users, this threat group primarily target victims in Eastern Europe, impersonating real local news websites or prominent brands.
  • Real news websites or major brands are spoofed by the group websites, such as Russian news sites or messaging platforms, to lure victims.
  • This group uses constantly changing URL paths for scam landing pages, making them more difficult to trace.

According to Infoblox, the firm that disclosed its threat intelligence to the authorities, because the two groups of criminals use DNS exploitation for their campaigns, defenders can use DNS as a key element for security. Automated detection and correlation of scam domains at scale are important for effective defense. Preventing access to fake media and platforms using protective DNS services with robust threat intelligence can also help.

Share:

PreviousWith Q1 2025 over, research teams fine-tune their cyber predictions for the rest of the year
NextNew disinformation trend: Widespread fabrication or recycling of victim claims by ransomware groups  

Related Posts

469 people in Singapore lose S$8.5m to a spoofed SMS

469 people in Singapore lose S$8.5m to a spoofed SMS

Thursday, January 6, 2022

Threat actors targeting MFA schemes: Time to layer more identity security measures!

Threat actors targeting MFA schemes: Time to layer more identity security measures!

Friday, February 3, 2023

Cybersecurity firm observes overall lack of cybersecurity awareness in Asia

Cybersecurity firm observes overall lack of cybersecurity awareness in Asia

Thursday, July 27, 2023

Rushing to adopt autonomous AI agents without tight vigilance is too risky

Rushing to adopt autonomous AI agents without tight vigilance is too risky

Saturday, June 14, 2025

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • Operationalizing sustainability in cybersecurity: Group-IB’s approach

    Operationalizing sustainability in cybersecurity: Group-IB’s approach

    See how the firm turned malware-group takedowns into measurements of sustainability and resilience gains: by …Read more
  • Thai government expands secure email management to close cybersecurity gaps

    Thai government expands secure email management to close cybersecurity gaps

    New measures address cybersecurity gaps in public sector communications, deploying advanced protections and operational support …Read more
  • How Iress optimized global DevSecOps

    How Iress optimized global DevSecOps

    Scaling compliance, security & efficiency – while seamlessly migrating to the cloud – with JFrog.Read more
  • St Luke’s ElderCare enhances operations and capabilities through a centralized secure, scalable network

    St Luke’s ElderCare enhances operations and capabilities through a centralized secure, scalable network

    With only a small IT team, the digital transformation has united operations across 30 locations, …Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.