A phishing-as-a-service platform known as Milk Dragon, or NaiLong, is being used in extensive social media fraud campaigns. According to coverage from Smarter MSP, this threat allows attackers to impersonate popular brands and create realistic online shopping experiences to steal sensitive information.
Milk Dragon operates as a phishing-as-a-service (PhaaS) kit, facilitating large-scale payment fraud primarily through social media platforms like Facebook and TikTok. Attackers lure victims with fake advertisements and marketplace listings featuring heavily discounted products, impersonating trusted brands. These fraudulent websites mimic legitimate e-commerce sites to harvest payment card details, personal data, and contact information. A key feature is its Adversary-in-the-Middle (AiTM) capability, enabling real-time interception of one-time passcodes (OTPs) and other transaction verification methods to complete fraudulent purchases. The platform utilizes a malicious WordPress plugin called BytePress to manage phishing sites and monitor victim activity.
This sophisticated approach bypasses traditional email-based phishing defenses, posing significant risks to consumers, businesses through brand impersonation and reputational damage, and financial institutions by facilitating OTP theft.
Source: Smarter MSP
