I recently read an interesting study by Group-IB, a Singapore based cybersecurity firm, on the raise of the giveaway type of scams (i.e the send me x and I’ll send you x2 back). I presume that they only detect a subset of the cases, but at least it gives us an idea of what’s going on:
During the first half of 2022, the company identified over 2K registered domains specifically created for these false giveaways, being the figure a very significant rise over last half of 2021. The main domains being used are .com, .org and .net, totalling 80% of the cases.
The majority of these domains were registered through Russian domain registrants, though the scams themselves were essentially carried out in English and Spanish.
The study indicates that the main source for traffic to these giveaway scam sites is YouTube, followed by Twitch and non-cited crypto streaming platforms. The average number of viewers for a fake giveaway stream is in the 10K-20K viewer range. I was surprised that regular social media posts (FB, Instagram, Telegram, etc.) were not mentioned as a core source.
They also talk about the existence of a whole marketplace out there to aid (at a not so high cost) others to commit these types of scams, providing services for hijacking streaming accounts, domain names, programmers, hosting, tools for deepfake, and so forth.
The things that lurk in the gutters …
See:
https://www.group-ib.com/media/massive-crypto-attack/