About a year ago, I rented an AirBnB house. Once I signed up, I realized the point of contact was named “China.” Well, my heart sank until I realized that China was her name. Still unconvinced, I have someone actually “look” at the property and see if it was real. It was, whew…..and “China” turned out to be a lovely person. I guess parents name their children other names than Susie, Patty and Cathy…. Ok, ok - I’m showing my age. But caution should still be employed for any AirBnB rental transactions.
It was recently reported that eight (8) members of an international cybercrime network that stole millions of Euros from victims and set up AirBnB fraud centers were arrested in Belgium and the Netherlands. The action was announced by Europol, which coordinated the operation, involving 17 simultaneous searches in the two countries, taking place on 03 December 2024. The arrests were the culmination of investigations that were launched in 2022 and carried out by a dedicated operational task force.[1]
The police in the Netherlands announced four (4) arrests of three (3) men and one woman, aged 23 to 66, who are believed to be associated with the cybercrime group. The suspects are accused of phishing, online fraud, bank helpdesk fraud, money laundering, and participation in a criminal organization. The Dutch agents confiscated data carriers, phones, various luxury items believed to have been purchased using cybercrime proceeds, and large sums of cash.
According to the Dutch police, the fraudsters rent AirBnB properties and luxury apartments to use as temporary call centers from where they launched phishing campaigns. They contacted victims across Europe using email, SMS, or WhatsApp messages, posing as bank employees or members of a fraud prevention task force. The scammers then claimed that the accounts of the victims had been compromised, urging them to follow links to phishing sites designed to appear as legitimate banking interfaces.
When the victims entered their personal information on those malicious pages, the threat actors gained control and quickly emptied the accounts. In some cases, the victims were verbally attacked, too, especially if the fraud attempt failed, leaving them psychologically traumatized. The police say the attackers spent the stolen money extravagantly, buying expensive vacation packages, designer clothes, luxury watches, high-end cars, and organizing parties in exclusive clubs. Europol says they did not keep a low profile, as they showcased their suspiciously affluent lifestyles on social media, posting images of expensive products and posing with various celebrities.
To avoid getting scammed by phishing actors and helpdesk fraudsters, treat unsolicited communications with caution and call your bank back on numbers found on the official website to confirm any issues with your accounts. Europol warns of small payments ($0.001) on websites selling second-hand goods, as these may be designed to pilfer your credit/debit card information. These are good cautions and need to be heeded.
This article is shared at no charge for educational and informational purposes only.
Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. We provide indicators of compromise information via a notification service (RedXray) or an analysis service (CTAC). For questions, comments or assistance, please contact the office directly at 1-844-492-7225, or feedback@redskyalliance.com
Weekly Cyber Intelligence Briefings:
- Reporting: https://www.redskyalliance.org/
- Website: https://www.redskyalliance.com/
- LinkedIn: https://www.linkedin.com/company/64265941
Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://register.gotowebinar.com/register/5378972949933166424
[1] https://www.bleepingcomputer.com/news/security/cybercrime-gang-arrested-after-turning-airbnbs-into-fraud-centers/
Comments