The French-speaking world of cybercrime is becoming more professional in phishing, offering turnkey services, including clone sites adapted to the needs of scammers.
Crit’Air, Netflix, Retirement insurance… Behind these scam campaigns hide services that have nothing to envy of startups. Cybersecurity company Vade shared a preview of a Numerama report on the French phishing market, citing scams regularly encountered.
The links found in each SMS and email generally refer to pages copied from official sites. Hackers rely on development services from these clone sites, popular in the world of cybercrime.
These phishing kits – called SCAMA in the cyber world – are promoted on Telegram and forums frequented by hackers. Cybercriminals are putting forward “bundles” of fake sites that scammers can use and deploy in a phishing campaign. These clone sites will serve as a medium to collect data and send it to cybercriminals.
The developers of these lures adapt according to current events. Vade researchers have thus spotted offers to develop Crit’air scams, or even campaigns on retirement insurance aimed at the oldest users.
In a commercial approach, cybercriminals highlight all the benefits of their “product”: aesthetic design, format for smartphone and computer, verification of bank card numbers, anti-bot filter to avoid being detected by cybersecurity programs .
Hackers who would like to recover a clone site place an order with these criminal micro-enterprises. They will receive a file containing the file to deploy. The SMS and email campaign is their responsibility and other services – sometimes legal – are generally responsible for distribution.
Cybercriminals compete on Telegram
“ International services are spreading large-scale phishing spoofing Microsoft, for example. Here, the scams are aimed at a local market. Analysis of publications and exchanges leads us to believe that this is a network made in France », Explains Romain Basset, Director of Customer Services at Vade. “ The market is quite developed, since cybercriminals compete on Telegram. Some get to the point of belittling the services of others in their publications. »
The ridiculous price of these services – between €100 and €200 – has also encouraged the proliferation of these scams. The sites are hosted by Asian services that pay little attention to customer activity.
Vade also notes that offers are being made to Internet users based in Dubai with scams written in Arabic. Even expats in the Emirates are not safe…
Subscribe to Numerama on Google News so you don’t miss any news!