APAC Digital Risk Protection Cases Report, August 2025

Highlights from our August 2025 edition

Cryptocurrency platform phishing campaigns

Phishers impersonate a major crypto platform and trick users into ‘migrating’ to new wallets preloaded with attacker-controlled seed phrases which grant them instant access to victims’ transferred funds.

Smishing via subdomains

Attackers impersonate toll firms using shortened URLs with realistic subdomains and lure victims in APAC into fake billing pages to harvest card details and personal information.

Phishing Site Hosted On Government Website

A phishing page hidden in a writable government web directory mimicked a popular e-wallet login and exploited public trust to steal user credentials and financial data.

Fake Job Hiring Scams

Scammers pose as recruiters offering lucrative freelance jobs via WhatsApp groups, and collect personal data to trick victims into paying fake ‘registration’ fees.

Recovery Traps

Fraudsters impersonate fund-recovery agents using verified-looking accounts to lure past victims with promises of reimbursement, before charging them bogus ‘recovery fees’ and scamming them again.

Facebook Marketplace Scams

Scammers pose as buyers on Facebook Marketplace, move chats to Line, and steer victims from legitimate sales into fake investment or crypto schemes run by coordinated fraud groups.

Why you should read this report

While each case has been anonymized, they could, in fact, mirror threats faced by your own organization.

Whether your company operates in finance, e-commerce, technology, or government: The tactics detailed here reveal how threat actors exploit trust, brand reputation and digital platforms to deceive users and damage credibility.

By studying these cases, you will gain actionable insights into how similar scams, impersonation attempts, or fraudulent schemes could unfold against your brand; and how proactive digital risk protection can prevent your organization from becoming the next target.

This report isn’t just a record of cybercrime. It’s a reflection of today’s evolving digital threat landscape, and a guide to strengthening your brand’s online resilience before attackers strike.

Stop threats before they take over

Group-IB experts outline the latest regional risks and share steps you can take to strengthen your defenses against ransomware, hacktivism, and data compromise.

Receiving insights but unsure how to apply them to your defenses? Our experts are here to help. Contact us.

Stay informed. Stay protected.

Digital Risk Protection

APAC Digital Risk Protection Cases Report, August 2025

Highlights from our August 2025 edition

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="Cryptocurrency platform phishing campaigns">Cryptocurrency platform phishing campaigns

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="Smishing via subdomains">Smishing via subdomains

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="Phishing Site Hosted On Government Website">Phishing Site Hosted On Government Website

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="Fake Job Hiring Scams">Fake Job Hiring Scams

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="Recovery Traps">Recovery Traps

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="Facebook Marketplace Scams">Facebook Marketplace Scams