#Scam Empire – Victims of profit
During the past four years, scam call centers operating from Tel Aviv (Israel), Sofia (Bulgaria), Limassol (Cyprus), Tbilisi (Georgia) and Barcelona (Spain) have stolen no less than $275 million dollars from 33,000 individuals in 33 countries. Today it is time to reveal their true identities.
When Kehr meets VexTrio
Qurium can reveal that Doppelganger is using a hidden Cloaking service, making it possible for everything from Russian disinformation to Bitcoin scams to bypass both automatic and manual moderation of content in Facebook. The service, known as “Redirect.pro” is provided by Kehr.io, an actor known for providing a variety of online scam and fraudulent services. The investigation also links Doppelganger with VexTrio, a sophisticated cyber criminal operation that has been operating for years.
The “Delete Negative Links” Industry
Qurium Media Foundation has unveiled a complex operation aimed at manipulating online content by using fraudulent copyright claims to remove legitimate information from the internet. This investigation sheds light on the unethical practices employed by the “fake DMCA requests” industry.
How Russia uses EU companies for propaganda
Almost two years ago Qurium exposed the modus operandi of Doppelganger – the Russia-based foreign influence operation that had been targeting European media with pro-Russian disinformation since the start of the war in Ukraine. Two years later, the disinformation campaign is still active but with refined methods to distribute links to fake content and new server infrastructure responsible for distributing the content.
Tell of Spring – The industry of promoting financial scams from Tel Aviv
(Note 16/7/2024: The contact details of one of the researchers of this investigation has been removed from this article) In the investigation Tell of Spring, Qurium has teamed up with cyber security researchers from French […] and Canadian Cyber Citoyen to bring light into the world of Affiliate networksAffiliate networksAct as intermediaries between the publishers […]
Proxy providers used in repeated DDoS attacks against Russian exiled media Meduza.io
Meduza is one of the largest and most influential Russian regime critical news site that delivers daily news from all across Russia in Russian and English languages. Since January 2023 Meduza has been declared undesirable in Russia since the media outlet “poses a threat to the foundations of Russia’s constitutional order and security” and their website […]
The scam machinery – powered by paid Ads and bullet proof hosting
In a joint investigation with Le Monde, Qurium has investigated a number of fake articles – impersonating Le Monde news paper – spreading disinformation and linking readers to fraudulent crypto currency investment scams. Our investigation lead us to RPT Company, a Russian affiliate marketing organization run by Leonid Belov and Yakov Rutman, awarded for their […]
A lie told a million times becomes a fact
– Russian involvement in deep fake video of Maria Ressa on Facebook 4 March 2024 Deep fake videos of celebrities promoting fraudulent Bitcoin solutions are on the rise. The purpose is to encourage viewers to enroll into fraudulent Bitcoin platforms, but the poorly crafted deep fake video of Maria Ressa promoting the crypto-currency scam “Bitcoin […]
Monetization of hacked Facebook pages: Money to earn for everyone!
7 February 2024 Hacked Facebook pages is no news, millions of accounts are compromised every year. But what are they used for, and who monetizes on those accounts being hacked? Qurium’s investigation starts with a handful of hacked Facebook pages belonging to the Ugandan media group “Nation Media Group” which have been used to drive […]
Russian disinformation against Zelenskyy exposed on Times Square billboard
2 February 2024 In November 2023 the Ukrainian president appeared in a video clip seemingly filmed from Times Square, showing Zelenskyy advertising for a drug rehab center in Los Angeles. Although it was clear that the video was an action against Zelenskyy, the question was rather how it had been done. Had the attacker paid […]
