New hierarchy, heightened threat: Classiscam’s sustained global campaign

Group-IB's analysis details the Classiscam scam-as-a-service ecosystem: automated Telegram groups and bots that create phishing pages and fake ads to trick users into prepaid transactions or entering bank credentials, impacting users across 79 countries with an estimated $64.5M stolen; recent evolutions include specialized group roles, balance-check forms, localized fake bank login pages (35 banks in 15 countries), and some groups using information-stealer malware—the report provides regional loss breakdowns and remediation recommendations for brands and consumers.