Darknet Networks Enable a Range of Retail Fraud and Phishing Schemes

Summary

DarkOwl describes retail fraud methods observed in underground networks, including refund schemes, POS malware, counterfeit goods, phishing sites, stolen gift cards and tactics targeting retailers and consumers.

Key points

• The article describes bots that exploit mispriced online products and resell them, as well as counterfeit goods offered on darknet marketplaces.
• Social engineering schemes include employees providing unauthorized discounts or refunds and criminals offering refund services.
• Refund fraud methods discussed include false non-delivery claims, empty-box claims, fake tracking IDs, wardrobing and fabricated receipts.
• The article says threat actors use POS malware to manipulate prices and use fake retail websites and phishing messages to steal credentials and financial or personal information.
• Underground sellers offer phishing kits, fake websites and website certificates, while gift cards and loyalty rewards are also stolen or counterfeited.
• DarkOwl recommends that retailers monitor underground forums and educate employees, but the article does not provide specific detection or mitigation procedures.

MITRE ATT&CK

Countries

Industries