"Click to Allow" Robot Exposes Online Fraud Empire
Essential information
- Published
- 12/08/2025 18:54
- Modified
- 12/08/2025 19:55
- Tags
- 2025-08-12 affiliate marketing cryptocurrency fraud cybercrime dating scams malicious apps scams spam traffic distribution
- Related entities
- 28 observables, 1 intrusion sets (apt), 10 techniques (mitre)
Description
VexTrio, a cybercriminal organization, has been exposed for running a vast online fraud empire involving scams, spam, and malicious apps. Their operations include fake dating sites, cryptocurrency scams, and deceptive apps that have been downloaded millions of times. VexTrio uses sophisticated traffic distribution systems to deliver their scams, often infringing on well-known brands and celebrities. They also operate extensive spam networks, using lookalike domains of reputable email services. The group's activities extend beyond their core fraud business, with connections to seemingly legitimate enterprises in various industries. Despite operating for 15 years, VexTrio has managed to avoid legal consequences, highlighting the challenges in combating such large-scale online fraud operations.