GINC-APT-0919 · Tracked, unattributed

ScamClub

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0919 · scamclub

What it is

ScamClub is a threat actor involved in malvertising activities since 2018. They target the Mobile Web market segment, particularly on iOS devices, where security software is often lacking. ScamClub utilizes obfuscation techniques and real-time bidding integration with ad exchanges to push malicious JavaScript payloads, leading to forced redirects and various scams such as phishing and gift card scams.

Tools

The tools and malware families the sources tie to it.

  • MobileOrder

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de