These social media posts promise big online discounts on Lego, Calvin Klein and more — but really they're just phishing scams
There's an elaborate scheme making rounds on Facebook and TikTok to get people to websites laden with infostealers.
A new phishing scam, dubbed "Milk Dragon," targets online shoppers by using fake ecommerce sites and social media promotions to steal payment information. The malware, BytePress, captures credentials and multi-factor authentication codes in real time, even before form submission. The attackers target trusted brands and banks, luring victims with false promises of big discounts on popular items like Lego and Calvin Klein.
The scam runs on a phishing kit called Milk Dragon, sold on Telegram channels to various hacking groups for monthly or yearly fees. To carry out the scam, the victims are tricked into visiting fake websites that look identical to legitimate ones. Once on the fake site, the malware called BytePress streams the victim's keystrokes character by character, capturing login details and one-time passwords.
The victim sees a fake order confirmation, believing the transaction went through successfully, while the attackers use their stolen credentials for malicious purposes. The scam has affected victims in 66 countries, with Malaysia, Singapore, and Thailand being the most targeted. The attackers abused 21 popular brands and 36 financial institutions, creating fake listings on Facebook and TikTok groups where bargain hunters gather.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
