Banners, Bots and Butchers: An Automated Long Con Targeting Japan, Asia, and Beyond
ID: 0a66d8e8-60bc-5f09-a7de-6537e90eb515
STIX ID: report--0a66d8e8-60bc-5f09-a7de-6537e90eb515
Feed Name: Infoblox Threat Intel Blog
This intelligence report describes an ongoing, industrial-scale hybrid scam that uses malvertising to direct victims to lure websites hosted on RDGA-generated domains, then transitions victims into messaging apps (LINE, KakaoTalk, WhatsApp) where automated or AI-assisted chatbots impersonate financial experts to extract funds via pig‑butchering techniques; the campaign is heavily targeted at Japan and Asia, spans multiple languages and regions, and includes more than 23,000 associated domains and a catalog of sample IOCs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
