Fraud ring pushes 600+ fake web shops via Facebook ads
ID: 69f3253f-f9bf-5d85-9bff-9acdee8c6193
STIX ID: report--69f3253f-f9bf-5d85-9bff-9acdee8c6193
Feed Name: Bleeping Computer
Threat Score
Recorded Future uncovered an active fraud campaign labeled “ERIAKOS” that uses Facebook ads to push more than 600 mobile-only fake web shops offering unrealistic discounts to steal credit card and personal data. The operation reuses a common CDN (oss.eriakos.com), registers domains via Alibaba Cloud, and uses IPs 47.251.50.19 and 47.251.129.84; it evades detection by serving pages only to mobile referrals and cycling short-lived domains, and is believed to likely originate from China.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.