Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme

In a disturbing trend, cybercriminals are increasingly focusing their efforts on brokerage services, employing sophisticated phishing tactics to exploit unsuspecting investors. Recent research indicates that these groups are utilizing advanced phishing kits designed to convert stolen payment card data into mobile wallet funds, thereby enhancing their ability to execute fraudulent transactions.

The Shift in Tactics

Despite the robust security measures implemented by many trading platforms to prevent unauthorized fund transfers, phishers have adapted their strategies. Instead of attempting to wire funds directly from compromised accounts, they are now leveraging multiple compromised brokerage accounts concurrently. This multi-account strategy allows them to manipulate the prices of foreign stocks, facilitating what is known as a ‘Ramp and Dump’ scheme.

Understanding the ‘Ramp and Dump’ Scheme

The term ‘Ramp and Dump’ refers to a scheme where fraudsters artificially inflate the price of a stock (the “ramp”) by creating a false sense of demand. Once the price is sufficiently inflated, they sell off their shares at the higher price (the “dump”), leaving ordinary investors to bear the losses when the stock price crashes.

How the Scam Works

• Phishing Attack: Cybercriminals initiate the scheme by launching phishing attacks to gain access to brokerage accounts. These attacks often mimic legitimate communications from the brokerage, tricking users into providing their credentials.
• Account Compromise: Once access is gained, the attackers can manipulate account settings and conduct unauthorized trades.
• Price Manipulation: By using multiple compromised accounts, they can buy and sell shares of targeted foreign stocks, artificially inflating prices.
• Cashout: After creating a price spike, the fraudsters sell their shares, profiting at the expense of unsuspecting investors.

Protecting Yourself from Phishing Attacks

To safeguard against these types of attacks, investors should take proactive measures:

• Enable Two-Factor Authentication: Always use two-factor authentication (2FA) on your brokerage accounts to add an extra layer of security.
• Be Wary of Suspicious Emails: Look out for unsolicited emails or messages asking for sensitive information, and verify the sender before clicking on any links.
• Monitor Your Accounts Regularly: Keep a close eye on your account activity and report any suspicious transactions immediately.
• Educate Yourself: Stay informed about the latest phishing techniques and scams targeting investors.

Conclusion

As cybercriminals continue to evolve their tactics, it is crucial for investors to remain vigilant. By understanding the risks associated with brokerage accounts and implementing strong security measures, individuals can better protect themselves from falling victim to these sophisticated scams. Stay informed, stay secure, and always prioritize your cybersecurity.