logo

Tracking Adversaries: GreenMwizi, Kenyan scamming campaign using Twitter bots

ID: 7428dcc3-31ba-55c2-b5e6-fba1f1d2f46e

STIX ID: report--7428dcc3-31ba-55c2-b5e6-fba1f1d2f46e

Feed Name: BushidoToken Blog

Threat Score
30/100

Date Published: 2024-03-06

Date Updated: 2026-06-12

...
...

This report details an active, financially motivated scam campaign named GreenMwizi that operates dozens of fake Booking.com Twitter accounts to socially engineer complainants into WhatsApp conversations and fraudulent Remitly transfers; the author documents account listings, one phone number (+254 771 609283), an IP and device fingerprint (IP 154.123.56.191, Infinix Android device), and recommends takedowns and carrier/payment-provider actions.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.