Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime

This report describes tutorials shared on Telegram and dark web forums that teach actors to exploit vacant residential properties, digital postal services, and forged identities to intercept and forward victims' mail—creating persistent fraud infrastructure for identity theft, account takeover, and financial scams. The technique blends OSINT, postal-service features (Informed Delivery, change-of-address, mail forwarding), and human proxies, and is presented as a growing, scalable threat that operates outside traditional cybersecurity controls.