Threat video1:00
Scam Compounds Trafficked-Labor Fraud: Detection & IOCs
Trafficked workers staff the scam compounds FATF says move money through crypto and mules. Use 9 detection rules, 4 IOCs and a free Splunk SPL rule.
Read the full threat intel for Scam Compounds Trafficked-Labor Fraud: Detection & IOCs →
Chapters
- 0:00The hookForced workers drive about $500bn of fraud annually.
- 0:05The storyMyanmar alone forced an estimated 120,000 to scam.
- 0:13Attack pathScam domains, fake personas, AI content.
- 0:28AttributionNo threat actor is attributed.
- 0:33Indicators of compromiseNo malicious indicators were published.
- 0:38MITRE ATT&CK techniques6 ATT&CK techniques, from resource development to impact.
- 0:43Remediation3 steps now: Act within the first 24-72 hours of a reported scam.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Forced workers drive about $500bn of fraud annually.
0:05Myanmar alone forced an estimated 120,000 to scam.
0:10Victims in 100+ jurisdictions.
0:14Scam domains, fake personas, AI content.
0:17Messaging starts romance baiting.
0:19Instant payments drain funds in about two minutes.
0:22Money mules and OTC desks launder the proceeds.
0:29No threat actor is attributed. Confidence: low.
0:33No malicious indicators were published.
0:396 ATT&CK techniques, from resource development to impact.
0:443 steps now: Act within the first 24-72 hours of a reported scam.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.