Google Images Technical Support Scams

In two separate instances, Wapack Labs has reported technical support scams. Upon examining these scams, Wapack Labs observed other products being targeted by scammers. Performing a Google Image search for “<technology product> technical support” yields images with phone numbers for technical support. Upon performing basic OSINT collection against these phone numbers, it is apparent these phone numbers are involved in scams. Scammer tactics routinely offer a Remote Desktop Support to troubleshoot the devices. Some of these scams charge monthly fees for remote support services, but do not actually fix technical problems, and others are solely for dropping malware during the Remote Desktop session. The malware dropped during the Remote Desktop sessions will often include free or cracked version of keyloggers and other novice data/credential exfiltration tools...READ MORE

Wapack Labs has cataloged and reported on technical support scams in the past. An archive of related reporting can be found in the Red Sky Alliance portal.

WWW.WAPACKLABS.COM

Venmo Fraud Scam

Venmo is a mobile payment service owned by PayPal that allows users to transfer money using a mobile phone app or web interface. Threat actors have been noted purchasing reloadable gift cards online with stolen bank funds, and then transferring the money into a Venmo account. From the Venmo account, the actor will execute a wire transfer to another account, often an offshore bank in a country with lax banking rules. Venmo significantly reduces the time it takes to cash out stolen funds, which makes it harder for victim banks to stop illicit transfers. Financial sector scrutiny of the Venmo service is recommended.

Wapack Labs has cataloged and reported extensively on wire transfer scams in the past. An archive of related reporting can be found in the Red Sky Alliance portal.

WWW.WAPACKLABS.COM