Nine-Year Russian Company Site Cloning Fraud Scheme Targets International Firms for Advance Payment Theft

Cybercriminals operated a nine-year fraud campaign by cloning Russian company websites to steal advance payments from international firms through phishing and fake documents. The scheme involved lookalike domains, manipulated contact details, and counterfeit business materials, affecting organizations across the Commonwealth of Independent States and causing significant financial losses.

Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with an aim to siphon funds from international firms for more than nine years.

According to Russian cybersecurity vendor F6, the threat actors have set up clone websites of Russian companies across fertilizer manufacturers, petrochemical companies

Read original article