This report highlights the rise of Ramadan-related cyber scams, particularly targeting charitable contributions and crypto investments. Cybercriminals are exploiting the goodwill associated with Ramadan to spread fraudulent schemes, often using social engineering tactics to deceive victims. Understanding these scams is essential for safeguarding against potential losses. Affected:crypto sector, charitable donations, e-commerce environment
Keypoints :
- Cybercriminals exploit Ramadan’s spirit of charity by launching targeted crypto scams.
- Scammers use deceptive offers, giveaways, and airdrops to attract users.
- The RamadanAI website promoted fake giveaways tied to dubious tokens.
- Victims are manipulated through gamified tasks linked to religious practices.
- Phishing and wallet connection scams lead to significant losses for victims.
- The absence of regulation in the crypto space enables fraudulent token promotions.
- Fake e-commerce websites and social media scams threaten consumer trust.
- Public awareness and strong cybersecurity measures are crucial for mitigation.
MITRE Techniques :
- Social Engineering (T1203): Scammers use social proof and psychological manipulation to lure victims.
- Phishing (T1566): Email and social media campaigns trick victims into disclosing sensitive information.
- Credential Dumping (T1003): Scammers attempt to capture private keys or seed phrases from victims.
- Exploitation of Trust (T1305): Manipulating the trust users have in religious or charitable contexts to perpetrate scams.
- Abuse Elevation Control Mechanism (T1068): Scammers exploit vulnerabilities in legitimate services to gain unauthorized access.
Indicator of Compromise :
- [Domain] ramadanai[. ]com
- [Domain] bim.4sa5t[. ]shop
- [Domain] free705.uj92[. ]xyz
- [Domain] free723.vcw27[. ]xyz
- [Email] fraudulent.zakat@identity[. ]com
Full Story: https://www.cloudsek.com/blog/ramadan-scams-on-the-rise-fake-giveaways-crypto-traps-fraudulent-donations