Cyber Security News

Beware of Ramadan & Eid Fitr Online Scams that Steal your Financial Data

As the holy month of Ramadan approaches, bringing a surge in online shopping and charitable giving, cybercriminals are ramping up their efforts to exploit the festive spirit.

A recent study by Security has highlighted an increase in fraudulent activities targeting consumers in the Middle East, particularly in the Kingdom of Saudi Arabia (KSA), where consumer spending has topped $16 billion.

This article delves into the sophisticated tactics these cyber criminals employ and offers advice on staying safe online.

The Rise of Cyber Fraud During Festive Seasons

During Ramadan and Eid Fitr, there’s a notable spike in retail and online transactions. Unfortunately, this increase in activity also attracts cybercriminals looking to exploit the situation.

Document

Free Webinar : Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities. :

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

AcuRisQ, which helps you to quantify risk accurately:

Resecurity’s findings indicate that the financial impact of these fraudulent activities ranges between $70 and $100 million, affecting expatriates, residents, and foreign visitors alike.

Sophisticated Scams Targeting Consumers

Cybercriminals are employing increasingly complex methods to defraud individuals.

These include the “Smishing Triad,” a tactic previously identified by Resecurity, which has been used to target consumers not only in the Middle East but also in the U.S., U.K., various European Union countries, and the UAE.

The most common types of fraudulent activities observed include:

  • Gift/charity/donations fraud
  • Employment-based fraud (job scams)
  • Money mules recruitment activity (financial fraud)
  • Fake point of sales (PoS)
  • Impersonation of logistics and postal providers
  • Romance scams/blackmail
  • Phishing/smishing activity
  • Loan/investment fraud
  • Cryptocurrency scams
Fraudulent activities (source: Resecurity)

Impersonation of Trusted Logistics Providers

A rising trend in scams involves bogus notifications from reputable shipping companies like Aramex, SMSA Express, and Zajil Express.

Example of a fraudulent website impersonating Zajil Express

These messages falsely claim that a parcel delivery is pending due to unpaid fees, urging recipients to make immediate payments.

This method tricks individuals into believing they owe money for a delivery, prompting a quick response.

Abuse of SADAD and MUSANED Platforms

Cybercriminals have also targeted the SADAD and MUSANED platforms, creating fake websites to intercept two-factor authentication (2FA) or one-time passcode (OTP) codes.

This sophisticated phishing approach aims to bypass security measures and gain unauthorized access to victims’ accounts.

  • Original SADAD website: https://www.sadad.com/
  • Phishing SADAD website: https://sadad14c.softr.app/
  • Original Musaned website: https://musaned.com.sa/home
  • Phishing Musaned website: https://musaned2comsa3.softr.app/

Money Mules Recruitment Via Ajeer and Rental Scams Via Ejar Platform

Fraudsters are exploiting platforms like Ajeer and Ejar to offer non-existing jobs and properties, respectively.

These scams not only aim to profit from illicit activity but also to exploit workers and renters illegally.

  • Original Ajeer website: https://ajeer.qiwa.sa/
  • Phishing Ajeer website: https://sites.google.com/view/iger-1
  • Original Ejar website: https://www.ejar.sa/
  • Phishing Ejar website: https://ejar-sa-ar.netlify.app

With over 320 fraudulent sites and platforms blocked by Resecurity in the Middle East, it’s clear that cybercriminals are aggressively exploiting trusted platforms to deceive internet users.

Consumers are strongly advised to refrain from sharing personal and payment information on questionable sites or with individuals posing as bank or government employees.

Reporting suspicious resources to local law enforcement and designated contacts in these organizations is crucial in helping to prevent potential fraud risks.

As we navigate the festive season, staying informed and vigilant is our best defense against these sophisticated online scams.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.

Dhivya

Divya is a Senior Journalist at Cyber Security news covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…

3 hours ago

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

Hackers are making some phishing pages harder to track by changing the code delivered to…

4 hours ago

Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days

A cyber incident reportedly forced a British power plant to halt operations for about four…

5 hours ago

Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets

Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…

5 hours ago

Ransomware Gang Claims AI Can Analyze 700GB of Stolen Data Every Hour

TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…

5 hours ago

Hackers Compromise Hundreds of WordPress Sites to Deploy Amatera Stealer via ClickFix

A fake student resume is being used to place a remote-access tool on researchers’ Windows…

7 hours ago