Attack of the clones: Scam Game in Social Media

The Lotsy scheme was first reported by Group-IB researchers in August 2019. A new wave of Lotsy, identified by the Group-IB Digital Risk Protection team, however, has grown more sophisticated and is covertly using fake brand pages on social media, short-lived ad campaigns on Facebook followed with surveys on Google forms and phishing websites. Fraudsters exploit the lack of comprehensive monitoring and blocking efforts to create and hide fake sites that misuse legitimate brand names. Recently, cases in which attackers deploy multistage fraud schemes such as Rabbit hole and Lotsy have been surfacing.