📜 ⬆️ ⬇️

A look inside the cyber fraudulent call centers

Brian Krebs, the author of a blog about hacking, hackers, viruses and other things related to computer security, recently wrote a post about fraudulent call centers. Interestingly, the article describes not those call centers that work to deceive "their" victims, but those who work by deceiving "foreign" clients for a commission from the call, i.e. call centers that work for outsourcing.
Such a "CCCCaaS" - "Cyber-Crime-Call-Center-as-a-Service". My term was born when writing this article (besides, the abbreviation "CCaaS" on the Internet is already taken up with such concepts as "Contact-Center-as-a-Service" and "Customer-Care-as-a-Service").
The second feature of such online businesses is their belonging to the post-Soviet space.

Below is the artistic translation of this article ( please write comments in private messages ).

image

')
Scammers who make a living by stealing personal data, fraud on dating sites ( hereinafter referred to as “dating fraud” ) and other frauds often have difficulty in making a phone call to confirm the operation - they are required to demonstrate mastery of the language they do not speak fluently. A criminal call center allows fraudsters to outsource such calls to men and women who speak several languages ​​and can be hired to close the “deal”.

Some of these call centers are web services, allowing customers to upload information about their goals to a service that initiates a call to a bank, credit organization, delivery service, or a victim of dating fraud. Other call centers ask customers for information about the goal and the necessary actions through instant messaging services such as Jabber. This article is about services, interaction with which is carried out using web services .

In the screenshot below, we see how the user of such a service orders a radio-controlled toy “Ford Mustang” as a holiday gift for some child. He specifies the number and date of the order, the American Express card that is used for the operation, and asks that the order be sent as soon as possible to the address of a mule in Russia.

image

CallMeBaby, one of the oldest cybercrime call centers, serves a variety of scams, but it specializes in helping criminals to cash money in dating-fraud schemes (more detailed information on the role that call centers play in dating-fraud schemes: Fraudsters Automate Russian Dating Scams ).
Criminal call centers, like other questionable online services, rely on flashy advertisements and design to distinguish themselves from other services and attract new customers. Here is an ad for a service that has been running for 4 years:

image

Cost: $ 10 for each call in English, and $ 12 for calls in German, French, Italian, Spanish, Portuguese and Polish. The service advertises the presence of male and female employees who can impersonate someone who speaks these languages ​​and works from 5:00 pm to 3:00 am Moscow time (working time in America).

Some web services have an “urgent” function, when customers who are in a great hurry can speed up calls for an additional fee. Cyber ​​fraud Sparta warns customers that if the call center has to make a second call to complete the transaction due to insufficient information provided by the customer, the customer will pay twice.

image

Based on the foregoing, crime call centers seem to be a terrific opportunity to begin implementing voice biometric technologies , a fraud prevention solution that focuses on creating unique voice prints of famous criminals and uses a special anti-fraud filter for future calls from people who match these voice profiles.

Source: https://habr.com/ru/post/275591/


All Articles