cyber.hendryadrian.com
Security News · group-ib.com

Italian Authorities Target Telegram Network Selling Fake COVID-19 Green Passes

· Original article ↗

Summary

Group-IB helped Italian law enforcement investigate a Telegram network selling fake Green Passes. The investigation identified 35 channels with about 100,000 users and led to searches and questioning of suspects; authorities warned similar scams could reappear.

Key points

  • Scammers used Telegram to sell fake Italian Green Passes, claiming to obtain authentic passes through healthcare workers.
  • Buyers were asked to share personal details, including names, birth dates, residence city and tax codes, and pay about €100.
  • Payments were accepted through cryptocurrency, PayPal and Amazon gift cards; some buyers received fake QR codes or lost their money without receiving a pass.
  • Group-IB identified 35 Telegram channels offering the passes, with a combined audience of about 100,000 users.
  • Group-IB shared its findings with Italy’s Guardia di Finanza, which supported searches in several provinces and questioned suspects.
  • Authorities and Group-IB warned that similar offers for counterfeit COVID-19 credentials could reappear on Telegram, social networks and underground forums.

Article Details

Event Type
Cybercriminal scam selling counterfeit COVID-19 Green Passes and related certificates through Telegram.
Impact
Group-IB identified 35 Telegram channels with a combined audience of about 100,000 users. Buyers were asked to provide personal information and payment; some received fake QR codes or no valid pass. The investigation supported Italian law enforcement searches and the apprehension of over 35 suspects, and the number of active channels dropped. Authorities said the operation remained ongoing.

People

Gian Luca BerrutiColonel of the Guardia di Finanza who commented on the operation.

Vendors

Group-IBAs soon as that happened, they approached Group-IB’s Amsterdam-based High-Tech Crime Investigation department to get involved.

Products

Telegramthe operations of the “Green Pass” scammers, they found that the activities were primarily conducted on Telegram, which was actively used as an exploitation platform. The scammers claimed they had secured authentic

Countries

FranceThese offers were detected on Telegram channels, social networks, and underground forums.” In France, the illicit trade mostly takes place through Telegram.ItalyItaly also adopted the Green Pass, requiring access to restaurants, museums, gyms, high-speed trains, and eventually for all private and public workers.

Industries

Governmentof a parallel cybercriminal operation exploiting the situation for profit. Just days after the Italian government announced tighter restrictions linked to the COVID-19 health pass, Italian law enforcement became awareHealthcareprove to be a strong enough reason for cybercriminals to halt their malicious activities. Governments, healthcare systems, and social services across the globe worked tirelessly to manage the crisis and ensure the

Related Articles