Cybercriminals have shifted their tactics, now targeting brokerage account customers with sophisticated phishing schemes. This article explores the emerging 'Ramp and Dump' cashout scheme, detailing how these schemes manipulate stock prices and what investors can do to protect themselves.
In the ever-evolving landscape of cybersecurity threats, a disturbing trend has emerged where cybercriminals are shifting their focus from traditional methods to more sophisticated tactics. Recent investigations indicate that groups specializing in phishing kits designed to exploit stolen card data are now specifically targeting brokerage service customers.
These fraudsters are undeterred by the security measures that brokerage platforms have implemented. Many of these platforms effectively block users from wiring funds directly from their accounts, leading phishers to adapt their strategies. Instead of attempting to transfer funds out of a single account, they are now leveraging multiple compromised brokerage accounts simultaneously.
The term ‘Ramp and Dump’ refers to a manipulative trading scheme where criminals artificially inflate the price of foreign stocks through coordinated trading activities across multiple accounts. By executing trades from compromised accounts, these cybercriminals create a false sense of demand, leading unsuspecting investors to believe that the stock is performing well.
As brokerage customers become targets of these schemes, it is crucial for investors to remain vigilant. Here are some best practices to protect yourself:
The shift in tactics employed by cybercriminals underscores the need for heightened awareness and proactive security measures among investors. By understanding the methods used in ‘Ramp and Dump’ schemes and how to defend against them, individuals can better protect their investments and contribute to a more secure financial environment.
Noah Michael Urban, a 21-year-old from Florida, has been sentenced to 10 years in prison for his role in the Scattered Spider cybercrime group, which executed SIM-swapping attacks to steal over $800,000 from victims. This case highlights the growing threat of SIM-swapping and the urgent need for enhanced cybersecurity measures.
A 22-year-old Oregon man has been arrested for allegedly running the 'Rapper Bot' botnet, which powered DDoS attacks, including a significant incident that took Twitter/X offline in March 2025. This case underscores the ongoing cybersecurity threats posed by botnets and the importance of robust security measures.
A significant security breach occurred when Marko Elez, a young employee at DOGE, inadvertently leaked an API key for xAI's language models. This incident raises serious concerns about data privacy and cybersecurity protocols in government agencies, highlighting the need for stricter safeguards against unauthorized access.