Activities of a Nigerian Cybercriminal Uncovered

guest · Mar 17, 2020

Activities of a Nigerian Cybercriminal Uncovered
Rise and fall of a Nigerian cybercriminal called ‘Dton,’ who made hundreds of thousands of dollars in a 7-year campaign
March 17, 2020
https://threatpost.com/activities-of-a-nigerian-cybercriminal-uncovered/153751/

Ever wonder who’s behind one of those Nigerian cyber-crime email campaigns asking you to enter into a shady business deal and how they’re enacted? In a unique profile, researchers pulled back the curtain on such an attack with a report outlining how a Nigerian cybercriminal made hundreds of thousands of dollars over the course of seven years by targeting people through numerous malicious campaigns.

Check Point uncovered the double life of a career cyber-criminal known as Dton, who hoodwinked hundreds of thousands of people with a cybercrime campaign using the moniker “Bill Henry,” the company said in the report, released Tuesday.

“By day, he is Dton, administrator of businesses and achiever of organizational goals,” researchers wrote in the report. “But by night, he is Bill Henry, cybercriminal entrepreneur.”
Click to expand...

Dton began his Nigerian cybercriminal business—which operated from 2013 to 2020–with simple credit-card fraud.
The first phase of Dton’s cybercriminal enterprise was to purchase stolen credit card details from Ferrum Shop, an online marketplace flogging more than 2.5 million stolen payment card credentials, then charge about $550 to each card he purchased.

Dton began buying “leads,” or email addresses of potential marks, in bulk, and then launching campaigns of his own to steal user credentials they wrote.
[...] Dton bought and tested various malware—such as packers and crypters, infostealers and keyloggers, exploits and remote VMs—from known cybercriminal marketplaces.

“Dton now disguises his custom-built malware into everyday email attachments, blasts them out to each of the email addresses on his lists, and harvests user credential details without the email owners ever knowing,” researchers wrote.
Click to expand...

Check Point researchers cited the report as yet another cautionary tale to warn people to take care and be mindful in their online activities to ensure they are ordering goods and services from an authentic source.
Click to expand...

Check Point: A Life of Cybercrime: The Inside Story of How a Nigerian Hacker Earned over $100,000

When you spot a phishing attempt or an email with a suspicious document attached in your inbox, have you ever wondered who actually sent it to you, and how they got your details? Or even how much money they really make from their activities?
Well, we can now answer those questions.
Click to expand...

guest · Mar 18, 2020

mood said: ↑

Check Point: A Life of Cybercrime: The Inside Story of How a Nigerian Hacker Earned over $100,000
Click to expand...

Full details of Dton's exploits are available here:
Check Point Research: The Inside Scoop on a Six-Figure Nigerian Fraud Campaign

Cybercrime is usually a one-way street. Shady types send their malicious documents and Trojans downstream to us innocent folk. Worst-case scenario, we get infected. Best-case scenario, we smirk, hit “delete” and move on with our lives. Either way, we’re left with many lingering questions. Who sends these out? Where did they get our email address? Do they really make money doing this? How much?

If you’ve asked yourself these questions too many times, today is your lucky day. Meet A██████████ A███████ D██████ton, who we’ll call Dton for short:
[...]
Click to expand...

So, what have we learned?
We don’t need to tell you how to defend yourself against Dton’s RATs, because if you’re reading this, you already know how. Update your web browser. Before clicking a web link, ask yourself who put it there and check out the actual target domain, starting from the top level. Don’t open that unsolicited “invoice” or “shipment notice”; if you do open it, don’t open the attached document; if you do open that, don’t click “enable macros”.

It’s all trite advice that’s been repeated a million times – but the people who need to hear it aren’t reading this blog post. That’s how even Dton, a YOLO cybercriminal if we ever saw one, gets plenty of victims and rolls in cash.

Talk to your friends about low-effort cybercrime. Tell them that whenever they open an email, they should take a long, hard look at the picture above, and imagine the person pictured there composing that email in a Turbomailer window. And that if the image fits too well, they should think about their next click very carefully.
Click to expand...

Log in or Sign up

Activities of a Nigerian Cybercriminal Uncovered

guest Guest

guest Guest

Log in or Sign up

Activities of a Nigerian Cybercriminal Uncovered

guest Guest

guest Guest

Useful Searches