Five Charged in “Russian Coms” Fraud Platform Case

Key Points:

• Five individuals have been charged in connection with the Russian Coms vishing platform, which facilitated millions of scam calls targeting victims to steal personal information and funds.
• The platform was responsible for over 1.3 million scam calls to UK phone numbers, utilizing spoofed caller IDs to impersonate trusted organizations, resulting in significant financial losses for victims.
• Immediate actions include increased monitoring of vishing tactics and enhancing user awareness about caller ID spoofing and fraud prevention measures.

Technical Details: The Russian Coms platform operated as a cybercrime-as-a-service offering, providing features like voice-changing services and VPN apps to conceal the identity of fraudsters. This service enabled criminals to bypass multi-factor authentication (MFA) through associated schemes.

MITRE ATT&CK Techniques:

• T1071.001 - Application Layer Protocol: Web Protocols (Command and Control)
• T1078 - Valid Accounts (Defense Evasion)

IOCs Mentioned: None mentioned