Hundreds of fake government websites target users in Central Asia

Cybercriminals have created hundreds of fake government and news websites to target people in Uzbekistan, Belarus and Tajikistan with bogus offers promising cash payments or passive income.

Researchers at cybersecurity firm F6 identified more than 360 fraudulent domains tied to the campaign. The sites are designed to collect victims’ contact details, which scammers then use to target them through phone or email to steal money, personal information or gain access to their devices.

The websites exploit people’s trust in government social programs, telling visitors they are eligible for financial assistance or can earn passive income through government-backed programs, according to the report released Monday.

In Uzbekistan, for example, the fraudulent sites promise residents weekly payments of 15 million Uzbek sums, or about $1,300. To claim the money, users are initially asked to provide little more than their name and phone number.

Some of the sites are simple landing pages promoting the supposed benefits and asking visitors to fill out a form. Others are more sophisticated, mimicking regional news websites and publishing fake stories about government assistance programs before directing readers to questionnaires.

Once users submit their details, scammers typically call them while posing as personal managers. They may ask victims to pay a commission or processing fee to receive the promised money, or try to obtain more personal information and gain access to their devices.

In some cases, victims are instructed to install a mobile application supposedly needed to register for the program or verify their identity. The application is actually malware capable of giving attackers control over the device and potentially allowing them to steal money from victims’ accounts, F6 said.

Some victims may also be asked to provide scans of their passports as part of a supposed verification process. Scammers can then use the stolen documents for further fraud, including taking out loans in victims’ names or carrying out phishing attacks.

“Scammers involved in these schemes exploit citizens’ trust in government programs and social initiatives,” F6 researchers said. “They carefully copy the visual style and language of government portals and news outlets to make the websites appear as convincing as possible.”

F6 has not identified the group behind the campaign. It is also unclear how many people have fallen victim to the scheme.