Stealing the extra mile: How fraudsters target global airlines in air miles and customer service scams

This Group-IB report documents a large-scale campaign of airline customer-service scams and loyalty-program fraud in which organized fraudsters operate phishing sites and fake support call centers (sharing US-format phone numbers), harvest payment and account credentials, perform account takeovers, sometimes deploy RATs, and monetize stolen miles by selling accounts or discounted tickets; the report maps the fraud lifecycle, cites a notable rise in incidents (30% increase in 2022, ~75 airlines impacted, ~2,000 malicious resources), and recommends digital risk monitoring, sessional anti-fraud systems, device fingerprinting, IoC hunting, and takedown/removal strategies.