Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script
Researchers at Trellix have highlighted a humorous yet dangerous voice-phishing scam where criminals accidentally included their own script in a recruitment ad. The ad, posted on Telegram, explicitly told applicants not to use scripts while simultaneously providing the exact script they were expected to read.
Why it matters
This incident illustrates the evolving tactics of cybercriminals and the effectiveness of 'psyops' research strategies in exposing and mocking threat actors to undermine their credibility.
More mockery and memes from the Dark Web Roast
Yes, criminals have job listings too. A Telegram user recruiting callers to work in an apparent Google Security Team voice-phishing scam told applicants that they weren’t allowed to read from scripts – in the same ad that also included the exact script they had to read during these scam calls.
This and other true-crime tales of criminals making fools of themselves appear in the latest installment of the Trellix Advanced Research Center’s Dark Web Roast, which uses memes and mockery to troll criminals on the dark web.
It also acknowledges: “While these incidents are genuinely amusing, they represent real criminal activities causing significant harm.”
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in