[ad_1]
Fake landing pages are already the basic scam of cybercriminals. Created by scammers hundreds of Netflix and Disney + playoffs in recent years. The BazaLoader team has also made fake sites before, including the believable personality of a lingerie retailer. But BravoMovies really surpasses it.
“We haven’t created a fake streaming site before,” says Sherrod DeGrippo, CEO of Proofpoint’s threat investigation and detection. “This is the next creative level of social engineering.”
The details on the BravoMovies website don’t always maintain a detailed analysis, but at least they give the company a light slate of credibility. Home pages in addition to HD, “Full HD” and 4K playback. Its category offer is well-known, even if the titles are not complete. It announces the main advantages of viewing downloads offline and compatible with some compatible devices (including Blu-ray players).
To convince the film’s small images, the attackers searched the design-oriented Behance social network for images, along with an advertising company and book. How to steal a dog. The results are skewed toward nonsense, but the truth is not much more than what you can find at the bottom of the Netflix queue.
As far as mistakes go, well … maybe for you. “We’ve seen phishing pages built on sites that build free websites and it looks like they were made by a child, and those continue to be successful,” Hassold says. “If someone got to the finish line on this page, the small spelling mistakes that most people would probably see and raise the red flag won’t move the needle much.”
The direction of the campaign is clear, as is its ultimate goal. As the back door, BazaLoader acts as a site for more malware to be built for more future purposes. Think of it as the Bifröst Bridge of Norwegian legend, but rather than the dirty viking god, it provides a gateway to ransomware. ProofPoint says it has not detected this second-stage load, but BazaLoader is closely linked to the team behind the infamous Trickbot malware.
The complexity of the BravoMovies method also has its drawbacks. While it’s great for getting email protections, it’s easier for people to click than to call. “Because it’s based on human interactions, which means someone who has to pick up and call the phone, the recipient is less likely to contact the threatening actor,” says DeGrippo of ProofPoint. He added that the BazaLoader team typically sends tens of thousands of emails in a given campaign, with a wide focus on geography and industry.
However, having put so much time and effort into it indicates that despite the difficulty of the scheme, it has to work. There are more exciting robberies. But the points are at least to achieve originality.
More great KABEKO stories
[ad_2]
Source link
