Online Scammers Steal Trillions

[onawah]

Saving a Victim from a 7 Year Scam
Kitboga
3.32M subscribers
Nov 5, 2023

(This case of yet another senior woman being badly scammed brought tears to Kitboga's eyes, who got started with busting online scammers due to his own grandmother getting scammed. But this case ended well, fortunately.)

"We uncovered a scam that had been going on for 7 years and saved an older woman from the scammers who were destroying her life."

0:00 Laying a Trap
04:36 Scammer falls for our trap!
09:15 Dr David
12:12 Wrong address
14:36 We found a victim
18:05 Explaining the scam
21:04 Confronting her scammer
27:18 Seven years of scamming

Source: https://youtube.com/watch?v=tzXRb8PdmJo

[onawah]

Pig Butchering Scams: Last Week Tonight with John Oliver (HBO)
LastWeekTonight
9.43M subscribers
Feb 29, 2024

"John Oliver discusses a popular internet scam, why it’s easier to fall for it than you might think"

Source: https://youtube.com/watch?v=pLPpl2ISKTg

(This humorous approach to a very serious subject is a good way to introduce one's self to a very depressing reality if you are not already aware, that is, just how many scamming crimes are being committed globally today (largely via the Internet), and the alarming rate at which that phenomena is growing.
Scamming has become a part of the business of human slavery as well, as more and more hapless people looking for work are being conscripted into criminal endeavors against their will, and are unable to resist due to threats on their lives.
A large part of the reason that these organized criminal businesses are flourishing is that the victims are too humiliated and ashamed to go public with disclosures about how they were fooled into compliance and/or coerced into becoming active participants.
So the average person is still largely unaware of how serious a situation this is becoming, and how many different forms these various scams can take, which only makes the problem worse. )

[JohanB]

Found it quite entertaining and “relevant” Onawah

This podcaster goes even deeper into the “problem”:

https://open.spotify.com/episode/5aM...RUeWrPk0v2JP0g

[onawah]

Beyond Scambaiting: Kitboga Unscripted
About Fraud
203 subscribers
Jun 26, 2025

(Kitboga has come a long, long way, and his scambaiting techniques are just as funny as ever, but he is now much more effective in stopping them altogether.
He has not only perfected a new comedy artform, but developed new ways in which scambaiting has become more effective.
This is very good news because very little is being done about it, even as it has grown into a global trillion dollar business annually. )

"Most of you know Kitboga from his super popular scambaiting channel on YouTube. In this session, you will learn a different side.

The esteemed Frank McKenna will conduct an interview style convo where you’ll learn about Kit's origins story, his evolution to building a full fledged team and tech, and how his interactions & insights can practically help FI’s.

Frank and Kit will riff on his new AI bots trained to waste scammers time, the explosion of brand impersonations (maybe even some in the crowd!), emerging scams like the Quantum AI scam, and even some interactive examples to bring the convo to life.

This is one of our can’t miss sessions!"
Kitboga is featured in

Source: https://youtube.com/watch?v=CYYXLXDHr6o

(By the way, scambusters Team Bubba have some Rumble videos from this year about scammer Kim Goguen, and may have a few more upcoming.
Though they figure they have been successful enough in curbing her activities so they don't need to focus on exposing her regularly anymore, so they have turned their attentions to other topics.)
https://rumble.com/search/all?q=team...20kim%20goguen


Source: https://www.rumble.com/video/v6fb20m/?pub=4

[Vicus]

Revenge on Scammers

Well,if a movie(money) was made about this theme, is must be something serious about...(money)

Source: https://youtube.com/watch?v=CHKn-yDCE2w

[onawah]

I'm surprised more movies haven't been made about it, but that one is so violent and the plot so unlikely I would never watch it.
There is a good review of the movie and discussion about scam call centers here:
https://cyber.tap.purdue.edu/blog/ar...t-unrealistic/
Here is the conclusion:

What is realistic ethical hacking?

The Beekeeper shows the main character Adam blowing up buildings and constantly killing people to get his revenge on the scammers and in infiltrate the bigger network of criminals. This is of course extremely unrealistic. Ethical hackers in the real world take a far less dramatic approach then Adam, they aren’t blowing up buildings or killing people. Instead, ethical hackers are authorized to gain unauthorized access to a system. They are security professionals and experts who perform security assessments for companies, groups, or individuals. The key factor for real ethical hackers is that they stay legal. It is about finding vulnerabilities so that systems can be better protected. The key factor for ethical hacking is to learn how to legally access and perform penetration tests. There are plenty of ways for a cyber professional to get this information such as cyberTAP’s advanced cyber range training or ethical hacking courses. Educating people on what scamming looks like is the easiest way to prevent these losses, especially when it is impossible to make sure everyone’s systems are completely vulnerable free.

Scambaiting is also considered a form of ethical hacking by some cyber professionals. Scambaiting is the process of exposing and manipulating scammers. This is mostly done through pretending to be a victim, acting as if they are susceptible to the scammer's plan. This kind of baiting applies mostly to call centers and one on one interactions, but scam baiters also work to expose websites or systems through other methods. This type of ‘ethical hacking’ is highly debated because of its risky nature and varying outcomes.

While this movie is unbelievably cheesy and over the top, it centers around an important reality. The elderly are unproportionally targeted by cybercriminals and scammers every day. In the most unfortunate circumstances, they lose the entirety of their life savings and all their data. It is so important that we work to properly educate as many people as possible to prevent these scammers from succeeding.

[onawah]

International Scammers Steal Over $1 Trillion in 12 Months in Global State of Scams Report 2024
Writer: Sam Rogers
Nov 7, 2024
https://www.gasa.org/post/global-sta...s-gasa-feedzai

"The Global Anti-Scam Alliance (GASA), in collaboration with Feedzai, has released its 2024 Global State of Scams report, uncovering staggering insights into the prevalence and impact of scams worldwide. Based on responses from 58,329 individuals across diverse regions, the report reveals the monumental economic and emotional toll scams take on consumers. The most eye-opening finding? Scammers have siphoned away over $1.03 trillion globally in just the past year—a figure that rivals the GDP of some nations. Yet amid the numbers, the report offers hope, with signs of increased scam awareness and resistance among consumers.

Scams on the Rise Across the Globe Exposing Regional Disparities
Despite relentless efforts to combat scam activity through awareness campaigns, scams remain a significant and growing threat, with nearly half of global consumers experiencing a scam attempt at least once a week. Certain regions are impacted more heavily, with countries like Brazil, Hong Kong, and South Korea facing near-daily scam exposure. Conversely, nations such as Vietnam, Saudi Arabia, and China reported a noticeable drop in scam encounters, suggesting progress in local preventive efforts.

Jorij Abraham, Managing Director of GASA, commented on these trends: "Very little has changed in the last 12 months, as the world’s consumers bear the weight of another $1.03 trillion stolen by scammers. We must do more to combat these crimes, as they continue to erode trust in our systems and cause immense harm to individuals and economies."

Global Confidence in Scam Detection Shows Promise
The report found that 67% of people globally feel confident in their ability to detect scams, reflecting the success of some awareness campaigns, however this could unveil complacency on the rise, too. Countries with high scam-detection confidence include China (84%) and Australia (72%), while Japan lags behind, highlighting the need for targeted educational efforts in certain regions.

Nuno Sebastião, Co-Founder, Chairman, and CEO of Feedzai, highlighted the role of financial institutions and technology in increasing consumer confidence: "Consumers are becoming smarter at catching scams themselves. This year, 67% of respondents expressed confidence they could spot a scam. This strong display of confidence is a testament to banks’ and others’ efforts to educate consumers on the red flags to watch for that could be a scam."

Financial Losses Mark Clear Division Between Developed vs. Developing Nations
The financial toll of scams is staggering, with the U.S., Denmark, and Switzerland reporting the highest losses per victim, with Americans averaging a $3,520 loss. Meanwhile, in developing countries like Pakistan, scams have a far greater impact, equivalent to 4.2% of the country’s GDP. Kenya and South Africa also reported heavy GDP impacts at 3.6% and 3.4%, respectively. The financial strain scams impose on both individuals and national economies underscores the urgent need for better safeguards and international cooperation.



AI and Social Media Driving New Scams
The rise of artificial intelligence (AI) in scam tactics is a growing concern, though awareness varies globally. In countries such as Japan, Thailand, and Malaysia, citizens remain largely unaware of the role AI may play in scam operations. Globally, 31% of respondents were uncertain if AI was involved in the scams they encountered, reflecting the evolving complexity of fraudulent activities.

Scammers continue to exploit popular platforms and channels. Phone calls and text messages remain the primary methods of initial contact, with WhatsApp, Instagram, and Gmail also frequently used. In the Philippines, South Korea, and Brazil, SMS scams are particularly prevalent, while WhatsApp scams are rising in various regions.

Emotional Impact: The Untold Cost of Scams

Beyond financial losses, scams inflict severe emotional distress on victims. Feelings of vulnerability, fear, and loss of trust are common, with Kenya, the Philippines, and South Africa reporting the highest emotional tolls. Meanwhile, Japan and South Korea show lower emotional impact, possibly reflecting cultural differences in scam reporting and victimization perceptions. The emotional burden of scams is a crucial reminder that fraud prevention goes beyond financial metrics; it’s also about protecting individuals’ mental well-being.

Why Some Regions Are More Affected than Others
The report sheds light on why certain regions report higher scam rates and losses. Shopping scams dominate in Kenya and Nigeria, while investment scams are rampant in Nigeria. In contrast, South Korea and Vietnam report the lowest levels of online shopping scams. Identity theft remains a significant concern in Australia and Mexico, with both countries showing a 25% victimization rate.

Only 4% of Victims Recover Their Losses
Perhaps the most concerning insight from the 2024 report is the dismal rate of financial recovery. Only 4% of scam victims worldwide were able to recover their losses. The U.S. and U.K. have the highest recovery rates, yet these remain low globally, leaving the majority of scam victims without recourse. This data highlights the urgent need for improved consumer protection mechanisms and more effective financial recovery processes.

Nuno Sebastião of Feedzai emphasized the role of banks and payment providers in the final stage of the scam lifecycle: "Banks and payment providers are at the final stage of the scam lifecycle, where illicit attempts to extract money either succeed or fail. Significant differences exist across countries, including how regulators approach scam prevention, which complicates global efforts."

Collaboration and Innovation Needed to Improve the Global State of Scams
The joint report by GASA and Feedzai underscores the importance of global cooperation, enhanced public awareness, and stronger financial recovery processes. With scams growing more sophisticated, banks and financial institutions are investing in advanced AI and machine learning tools to detect unusual activity and protect consumers in real time.

However, Nuno Sebastião warns that technology alone isn’t enough: "Protecting customers goes beyond technology—it’s about fostering industry-wide collaboration and ensuring data privacy. Together with GASA and our partners, we’re driving continuous innovation to stay ahead of evolving scam tactics, ensuring a safer financial ecosystem for everyone."

GASA and Feedzai urge financial institutions, social media platforms, and telecom providers to work together to safeguard consumers. The report highlights the need for standardized definitions and measurements of scams globally. Currently, regional differences in scam classification hinder collaboration, making cross-border comparisons and joint preventive measures challenging.

Jorij Abraham emphasizes the importance of GASA’s role in facilitating this global collaboration: "A global organization such as GASA plays a crucial role in unifying scam prevention efforts. Increasing the amount of shared, secure data across industries is essential to improving scam controls and protecting consumers worldwide."

The Double-Edged Sword of Generative AI
The report also raises concerns over Generative AI, which is becoming a potent tool for fraudsters. With AI able to generate realistic images, scripts, videos, and voices in seconds, scammers can deceive more victims more effectively. While AI’s ability to reproduce and scale tactics is a threat, its replication patterns also present opportunities for detection. Banks and tech companies can harness this vulnerability, using pattern recognition to identify and intercept AI-generated fraud schemes before they succeed.

The Road Long Ahead to Vastly Improve the Global State of Scams
The 2024 Global State of Scams report is clear: scams are costing consumers over $1 trillion globally, with dire financial, emotional, and social repercussions. While confidence in scam detection has improved, many consumers remain vulnerable, and only a small fraction recover their losses.

GASA and Feedzai are committed to driving a safer digital landscape through continuous collaboration and innovation. By uniting financial institutions, tech giants, telecom providers, and regulatory bodies, GASA aims to foster a world where scam tactics can no longer exploit innocent consumers. The journey to a scam-free future requires resilience, global cooperation, and an unwavering commitment to protecting the vulnerable.

For more information and to access the full Global State of Scams 2024 report, visit GASA's Research Page. For now, here are some key figures... "

[onawah]

Deepfake criminals impersonate Marco Rubio to uncover government secrets
AI | News
Posted: July 10, 2025
by Danny Bradbury
https://www.malwarebytes.com/blog/ne...t=Deepfake_img

"Deepfake attacks aren’t just for recruitment and banking fraud; they’ve now reached the highest levels of government. News emerged this week of an AI-powered attack that impersonated US Secretary of State Marco Rubio. Authorities don’t know who was behind the incident.

A US State Department cable seen by the Washington Post warned that someone impersonated Rubio’s voice and writing style in voice and text messages on the Signal messaging app. The attacker reportedly tried to gain access to information or accounts by contacting multiple government officials in Rubio’s name. Their targets included three foreign ministers, a US governor, and a US member of Congress, the cable said.

The attacker created a Signal account with the display name ‘Marco.Rubio@state.gov’ and invited targets to communicate on Signal.

The AI factor in the attacks likely refers to deepfakes. These are a form of digital mimicry, in which attackers use audio or visual footage of a person to create convincing audio or images of them. Many have even created fake video of their targets, using them for deepfake pornography or to impersonate businesspeople.

The Rubio deepfake isn’t the first time that impersonators have targeted government officials. In May, someone impersonated White House Chief of Staff Susie Wiles in calls and texts to her contacts. Several failed to spot the scam initially and interacted with the attacker as though the conversations were legitimate.

This incident wasn’t Rubio’s fault, attacks like these are becoming commonplace with scammers making use of popular messaging tools. Signal is apparently a widely-used app in the executive branch, to the point that Director of National Intelligence Tulsi Gabbard said it came pre-installed on government devices.

This Signal usage culminated in then-national security advisor Mike Waltz accidentally adding a journalist to a group Signal chat containing discussions plans to bomb Yemen. He is now no longer the national security advisor. Misuse of the app extends back to the previous administration, when the Pentagon was forced to release a memo about it.

Why should you worry about such attacks on government high-ups? For one thing, it’s scary to think that foreign states might actually get away with sensitive information this way. But it also shows how easy it can be to impersonate someone with a deepfake. You can mount audio attacks with just a few snippets of audio to train an algorithm on.

You’d be suspicious if Pamela Bondi entered your book club chat, but if someone called an elderly relative pretending to be you, saying you’d been involved in an accident, or begging for ransom money because you’d been kidnapped, would they fall for it? Several have.

Strange though it may seem, modern threats demand some old-school protections. We recommend sharing a family password with close members, who can then request it to confirm each others’ identity. Never send this password anywhere, keep it to yourselves and agree to it in person.

But even family passwords won’t stop your grandma being targeted in deepfake romance scams from fake Mark Ruffalos and Brad Pitts, though. A quiet chat to explain the threats might avert such disasters, though, along with a regular check-in to ensure your less tech-savvy loved ones are safe and sound."

Millions of people spied on by malicious browser extensions in Chrome and Edge
Posted: July 9, 2025
by Pieter Arntz
https://www.malwarebytes.com/blog/ne...omeandweb_logo

"Millions of people spied on by malicious browser extensions in Chrome and Edge

Researchers have discovered a campaign that tracked users’ online behavior using 18 browser extensions available in the official Chrome and Edge webstores. The total number of installs is estimated to be over two million.

These extensions offered functionality, received good reviews, touted verification badges, and some even enjoyed featured placement.

But when an extension has been available in the web store for a while, cybercriminals can insert malicious code through updates to the extension. Some researchers refer to the clean extensions as “sleeper agents.” These sleeper agents are the bases for future malicious activity.

Here’s one example of a malicious extension which poses as a search for Chat GPT, and was available for months.



Some of these extensions behaved nicely for years, which made the researchers think they might have been compromised. What these extensions did after they got “woken up” was they deployed a browser hijacking mechanism that activates every time someone navigates to a new page.

Every time the person visits a website, the extension would:

Capture the URL of the page they’re visiting.
Send it to a remote server along with a unique ID issued to track the user.
Receive potential redirect URLs from the command and control (C&C) server.
Automatically redirect your browser if instructed by the C&C server to do so.
The researchers used the following example of how this might work:

“You receive a Zoom meeting invitation and click the link. Instead of joining your meeting, one of the malicious extensions intercepts your request and redirects you to a convincing fake page claiming you need to download a “critical Zoom update” to join. You download what appears to be legitimate software, but you’ve just installed additional malware onto your system, potentially leading to full machine takeover and complete compromise of your device.”

Most of the malicious extensions have been removed from the web stores.



Reportedly, 1.7 million people installed these malicious extensions from the Chrome web store and a total of 2.3 million users were affected.

Although we always advise people to only install extensions from official web stores, this proves that not all extensions you download from there are safe. However, the risk involved in getting an extension from outside the web store is even bigger.

Extensions listed in the web store undergo a review process before being admitted. This review, a mix of automated and manual checks, assesses the extension’s safety, compliance with policies, and overall user experience. The goal is to protect users from scams, malware, and other malicious activities.

What to do
Check your computer to see if you have any of these extensions:

Emoji keyboard online (Chrome)
Free Weather Forecast (Chrome)
Unlock Discord (Chrome)
Dark Theme (Chrome)
Volume Max (Chrome)
Unblock TikTok (Chrome)
Unlock YouTube VPN (Chrome)
Geco colorpick (Chrome)
Weather (Chrome)
Unlock TikTok (Edge)
Volume Booster (Edge)
Web Sound Equalizer (Edge)
Header Value (Edge)
Flash Player (Edge)
Youtube Unblocked (Edge)
SearchGPT (Edge)
Unlock Discord (Edge)
If you find any of the above extensions, try doing the following:

Clear all browsing data (history, cookies, cached files, site data) to remove any tracking identifiers or session tokens that may have been stolen or set by the malicious extension. Note: you will then have to log in on a lot of sites since they will not remember you.
Monitor your accounts for any suspicious activity if you visited any sensitive sites (such as online banking) while one of these extensions was installed. Make sure to change your passwords for those accounts.
Enable two-factor authentication (2FA) where possible for added protection.
Reset your browser settings to default. This can help undo any changes the extension may have made to your search engine, homepage, or other settings. Note: this will also undo any changes you have made manually. Alternatively, look for signs like unexpected redirects, changed search engines, or new toolbars.
Keep an eye on your email and text messages for security alerts or notifications about unfamiliar access.
Make sure your browser and all remaining extensions are up to date.
Run a full system Malwarebytes scan to check for additional infections. This will also allow you to remove all affected extensions from Chrome and Edge. Malwarebytes blocks these domains so our users are safe.
To close off, one last word of general advice. If an extension asks for additional permissions after an update, that’s a good reason to look closely at what it requires and if that makes sense for the reason you’re using the extension.

List of malicious extensions and their domain names
Chrome extensions:

Chrome extensions:

kgmeffmlnkfnjpgmdndccklfigfhajen Emoji keyboard online

dpdibkjjgbaadnnjhkmmnenkmbnhpobj Free Weather Forecast

gaiceihehajjahakcglkhmdbbdclbnlf Free Weather Forecast

mlgbkfnjdmaoldgagamcnommbbnhfnhf Unlock Discord

eckokfcjbjbgjifpcbdmengnabecdakp Dark Theme

mgbhdehiapbjamfgekfpebmhmnmcmemg Volume Max

cbajickflblmpjodnjoldpiicfmecmif Unblock TikTok

pdbfcnhlobhoahcamoefbfodpmklgmjm Unlock YouTube VPN

eokjikchkppnkdipbiggnmlkahcdkikp Geco colorpick

ihbiedpeaicgipncdnnkikeehnjiddck Weather

Edge extensions:

jjdajogomggcjifnjgkpghcijgkbcjdi Unlock TikTok

mmcnmppeeghenglmidpmjkaiamcacmgm Volume Booster

ojdkklpgpacpicaobnhankbalkkgaafp Web Sound Equalizer

lodeighbngipjjedfelnboplhgediclp Header Value

hkjagicdaogfgdifaklcgajmgefjllmd Flash Player

gflkbgebojohihfnnplhbdakoipdbpdm Youtube Unblocked

kpilmncnoafddjpnbhepaiilgkdcieaf SearchGPT

caibdnkmpnjhjdfnomfhijhmebigcelo Unlock Discord

Domains:

admitab[.]com

edmitab[.]com

click.videocontrolls[.]com

c.undiscord[.]com

click.darktheme[.]net

c.jermikro[.]com

c.untwitter[.]com

c.unyoutube[.]net

admitclick[.]net

addmitad[.]com

admiitad[.]com

abmitab[.]com

admitlink[.]net "