‘Industrial-scale scam operations’: Global criminal organization operated slave compounds in Asia behind huge malware-as-a-service hydra targeting 35+ government agencies monthly

• Infoblox & Chong Lua Dao uncover global MaaS platform
• Spoofed domains harvest KYC data, intercept SMS, drain bank accounts
• Captive workers trafficked into Cambodian scam compound tied to elites

Malware operators – people sending phishing emails and guiding people through the infection chain – don’t always do it on their own free will – sometimes they are trafficked into scam centers and forced to work there.

One such global criminal organization was uncovered by security researchers Infoblox Threat Intel, and Vietnamese non-profit Chong Lua Dao, who recently observed a spike in anomalous DNS traffic across Infoblox customer networks, which led them to a previously undocumented malware-as-a-service (MaaS) Platform.