Social Engineering in Action: How Fraudsters Exploit Trust with Fake Refund Schemes in the Middle East

This report describes a region-wide fraud campaign where criminals use breached government portal data and RedLine-style stealers to impersonate officials, persuade victims to install remote access tools (e.g., AnyDesk), then capture credit card images and intercept OTPs on shared screens to perform multiple 3DS-secured fraudulent transactions and cash out via local marketplaces and e-wallets.