Threat video1:00
Fake Gift Card Scam Campaign: Detection & IOCs
Fake gift card portals push victims into surveys and carrier-billed subscriptions. The free Splunk SPL rule leads 9 detection rules and 9 IOCs.
Read the full threat intel for Fake Gift Card Scam Campaign: Detection & IOCs →
Chapters
- 0:00The hookOver 1,000 victims hit a fake-gift-card reward scam.
- 0:04The storyThe ads impersonate trusted brands with fake celebrity endorsements.
- 0:12Attack pathAds stage with fake celebrity endorsements, redirecting to cloned portals.
- 0:29AttributionNo threat actor is attributed.
- 0:33Indicators of compromiseNo malicious indicators were published.
- 0:39MITRE ATT&CK techniques8 ATT&CK techniques, from reconnaissance to impact.
- 0:43Remediation4 steps now: Block or sinkhole confirmed scam portal domains once identified.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Over 1,000 victims hit a fake-gift-card reward scam.
0:05The ads impersonate trusted brands with fake celebrity endorsements.
0:09Victims discover no reward.
0:12Ads stage with fake celebrity endorsements, redirecting to cloned portals.
0:17A fake human-verification gate loops through surveys, app installs, and subscriptions.
0:22Reportedly, mobile numbers and PINs trigger affiliate commission.
0:29No threat actor is attributed. Confidence: low.
0:34No malicious indicators were published.
0:398 ATT&CK techniques, from reconnaissance to impact.
0:444 steps now: Block or sinkhole confirmed scam portal domains once identified.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.