Busting CryptosLabs: a scam ring targeting French speakers for millions

Group-IB researchers detail CryptosLabs, an organized fraud syndicate active since 2018 that runs hundreds of fake investment sites and a reusable "scam kit" (CRM, landing-page builder, client portals, VoIP and leads panels) to defraud French-speaking victims in Europe. The report outlines the victim journey (ads → landing page → login → client portal), infrastructure scale (≈350 domains, ≈80 servers), operational structure (organizers, developers, call-centers, money mules), indicators (URL patterns like /landing/, /login.php, /client/), and recommended mitigations including proactive monitoring, transaction blocking, and law-enforcement investigations.