Cybercriminals are at it again, using fake trading apps to scam unsuspecting victims in a global fraud scheme known as “pig butchering.” Recent research from cybersecurity firm Group-IB reveals how these deceitful apps have found their way onto Google Play and the Apple App Store, tricking people into making substantial investments on non-existent trading platforms.
What Is Pig Butchering?
Pig butchering is a type of investment fraud where scammers build trust with their victims before ultimately draining their funds. The term reflects the process of fattening up victims emotionally and financially before “butchering” their investments. Over the past four years, it’s estimated that these scammers have stolen more than $75 billion worldwide, according to researchers from the University of Texas at Austin.
Fake Apps on Major Platforms
Group-IB has identified multiple fraudulent apps posing as legitimate trading platforms. These apps are part of the UniShadowTrade malware family and were created using the UniApp Framework. Some examples include:
- Math & Graphics App: One fake app claimed to help with “algebraic mathematical formulas and 3D graphics volume area calculations.” Once downloaded, users had to create an account and provide sensitive information, ultimately leading them to make deposits they could never withdraw.
- Stock News Impersonator: Another app pretended to deliver stock-related news and managed to garner over a thousand downloads before being removed from the Google Play Store.
Although some of these apps have been taken down, Group-IB warns that scammers continue to promote them through phishing websites targeting both Apple and Android users.
How Scammers Target Victims
While Group-IB hasn’t pinpointed specific methods of targeting, it suggests that many victims are approached via social engineering tactics on dating and social networking sites. After building a rapport, scammers convince their victims to download these seemingly legitimate apps, leading them into a trap.
Global Reach
Victims of this scheme have been identified across the Asia-Pacific, Europe, and the Middle East and Africa regions. The tactics used by these cybercriminals are part of a broader trend in investment-related crimes, which also includes directing victims to Bitcoin ATMs to drain their accounts or impersonating popular retail brands online.
Conclusion
As these scams evolve, it’s crucial to stay vigilant. Always research apps thoroughly before downloading and be wary of anyone urging you to invest money through unverified platforms. Protect yourself from falling victim to these deceitful schemes.
