Threat Management

US military families targeted in phishing attacks

Families of U.S. military workers and individuals looking to have romantic relationships with soldiers are being actively targeted by an enduring phishing campaign that involves fraudsters spoofing military support organizations and personnel, VentureBeat reports. Suspected threat actors behind the operations have been seeking to exfiltrate victims' names, bank account data, phone numbers, addresses, and photo identification, in an effort to facilitate future identity theft attacks and bank account theft, according to a Lookout Threat Lab report. Researchers were able to link the attacks to Nigeria after discovering that Nigerian providers mainly hosted the websites they used. One of the web developers also accidentally left a phone number with the Nigerian country code on the website's draft. Poor operational security practices have made tracking the group easier for researchers, who have also associated the group with 50 military scam sites, as well as other scams that involve cryptocurrency trading, phony delivery services, and banks.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.