Scam ‘Funeral Streaming’ Groups Thrive on Facebook
ID: fc72c1b2-dd48-59cf-94f8-9cdd28634764
STIX ID: report--fc72c1b2-dd48-59cf-94f8-9cdd28634764
Feed Name: Krebs on Security
KrebsOnSecurity documents a widespread scam where fake Facebook groups for funerals and other events link to newly registered streaming sites (e.g., `livestreamnow.xyz`) that demand credit card payments or donations; the investigation identifies clusters of look-alike domains hosted at IP 148.251.54.196, shared DNS/hosting providers (webhostbd.net, cloudswebserver.com), and registrant metadata tying the infrastructure to individuals in Bangladesh, while stealer logs from a compromised admin PC revealed stolen credentials and browser history used for attribution and IOC discovery.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.