{"id":55659,"date":"2022-01-11T10:10:06","date_gmt":"2022-01-11T08:10:06","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=55659"},"modified":"2025-09-04T02:41:11","modified_gmt":"2025-09-03T23:41:11","slug":"group-ib-identifies-8000-fraudulent-domains-targeting-crypto-and-stock-investors","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/group-ib-identifies-8000-fraudulent-domains-targeting-crypto-and-stock-investors\/","title":{"rendered":"Group-IB identifies 8,000 fraudulent domains targeting crypto and stock investors"},"content":{"rendered":"<p>Group-IB specialists uncovered more than 50 different schemes of fake investment projects created by scammers. The criminals are targeting potential investors in cryptocurrencies, equities, gold and other assets. ForkLog told Group-IB.<\/p>\n<p>Analysts described this type of fraud as &#8220;hybrid schemes&#8221; \u2014 alongside traditional phishing, fake mobile apps are used, as well as calls from &#8220;personal consultants&#8221;. The common feature of such projects is the promise of quick profits with little effort.<\/p>\n<p>From the scheme&#8217;s active spread since 2018 until the third quarter of 2021, Group-IB specialists identified more than 8,000 domains linked to fraudulent schemes.<\/p>\n<p>In spring 2021, adverts in social networks circulated on behalf of well-known figures who allegedly offered participation in ultra-profitable investment projects. The creator of Telegram, Pavel Durov, was most often featured in fake posts.<\/p>\n<blockquote class=\\\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\\\">\n<p>&#8220;As soon as a novice investor bites on the &#8216;bait&#8217;, he is directed to a questionnaire site from a &#8216;well-known bank&#8217; or to colorful single-page landing pages of an investment project. Usually, all of them are connected with trading &#8216;crypto&#8217;, fiat currencies, precious metals, minerals, natural resources, pharmaceuticals,&#8221; noted analysts.<\/p>\n<\/blockquote>\n<p>Subsequently a &#8220;personal consultant&#8221; contacts the victims and persuades them to deposit on the platform, or may request bank card details.<\/p>\n<p>Experts also detected a fully automated scheme \u2014 from a social media advertisement the investor is directed to GooglePlay, where he must download a dedicated mobile app to begin trading.<\/p>\n<p>As a result, victims lose funds without receiving the promised income.<\/p>\n<p>In December, criminals posing as investments in crypto assets extorted <a href=\"https:\/\/forklog.com\/en\/news\/kemerovo-resident-sells-his-home-and-hands-over-3-million-rubles-to-scammers-in-bid-to-profit-from-cryptocurrencies\">3 million rubles<\/a> from a resident of Kemerovo.<\/p>\n<p>Follow ForkLog&#8217;s bitcoin news on our <a href=\\\"\/\/telegram.me\/forklog\\\" target=\\\"\u201c_blank\u201d\\\" rel=\\\"\u201cnofollow\u201d noopener\\\">Telegram<\/a> \u2014 cryptocurrency news, prices and analytics.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Group-IB specialists uncovered more than 50 different schemes of fake investment projects created by scammers. The criminals are targeting potential investors in cryptocurrencies, equities, gold and other assets. ForkLog told Group-IB.<\/p>\n","protected":false},"author":1,"featured_media":55660,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154,1945],"class_list":["post-55659","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes","tag-group-ib"],"aioseo_notices":[],"amp_enabled":true,"views":"20","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/55659","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=55659"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/55659\/revisions"}],"predecessor-version":[{"id":55661,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/55659\/revisions\/55661"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/55660"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=55659"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=55659"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=55659"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}