Security News > 2022 > August > How hackers are stealing credit cards from classifieds sites
A new credit card stealing campaign is underway in Singapore, snatching the payment details of sellers on classifieds sites through an elaborate phishing trick.
Classicscam is a fully-automated "Scam as a service" platform that targets users of classifieds sites attempting to sell or buy something listed on the pages.
Classicscam was previously seen in Russia, Europe, and the United States but recently added the option to create phishing sites that mimic popular Singaporean classifieds sites.
For this particular campaign, the operation used 18 domains that served as a space for creating phishing sites through Telegram bots.
The scammers approach the seller of an item and declare interest in buying it, and eventually send them the URL of the generated phishing site.
If the sellers click on it, they will land on a site that looks like part of the classifieds portal, indicating that the payment for the mentioned item has been completed.