Tech Radar disclosed that a sophisticated scam campaign dubbed Milk Dragon is leveraging fake e-commerce websites and social media promotions to steal users' payment data. Researchers have identified that this operation utilizes a phishing kit to create convincing replicas of popular online stores, often featuring AI-generated listings and deals that are too good to be true.
The Milk Dragon campaign targets victims across 66 countries by abusing trusted brands and financial institutions. Instead of traditional phishing emails, the scam operators distribute lures through social media platforms like Facebook and TikTok, particularly in bargain-hunting groups. The campaign employs a malware called BytePress, which captures typed credentials and multi-factor authentication codes in real-time, even before a user submits a form. This malware can also intercept and relay MFA requests back to the victim, effectively bypassing security measures. Victims receive fake order confirmations, delaying their realization of the theft and preventing them from freezing accounts. The Milk Dragon phishing kit is reportedly sold as a service on Telegram, with victims primarily concentrated in Malaysia, Singapore, and Thailand. The operation spoofs 21 popular brands across various industries and impersonates 36 financial institutions.
Source: Tech Radar
