Threat actor
threat_actor:scattered_canary
Mostly Nigerian cyber-fraud group identified as engaging in business email compromise, romance scams, and pandemic unemployment fraud.
Mostly Nigerian cyber-fraud group identified as engaging in business email compromise, romance scams, and pandemic unemployment fraud.
“Scattered Canary was a mostly-Nigerian cyber-fraud group”
“they were doing romance scams. We know they were doing unemployment fraud”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Business E-mail Compromise | Explicit | 141 |
| outgoing | EXPLOITS | Google dot bug | Explicit | 141 |
| outgoing | USES | romance scam | Explicit | 141 |
Scattered Canary USES Business E-mail Compromise
Ronnie identifies Scattered Canary as a mostly Nigerian cyber-fraud group engaging in BEC since 2018.
Explicit Confidence 99% · Ronnie Tokazowski EP 141 Details
“Scattered Canary was a mostly-Nigerian cyber-fraud group that we found back in 2018 that was engaging in business e-mail compromise”
Scattered Canary EXPLOITS Google dot bug
Scattered Canary used e-mail accounts affected by the Google dot bug when targeting unemployment-fraud systems.
Explicit Confidence 98% · Ronnie Tokazowski EP 141 Details
“they used different e-mail accounts or e-mail accounts that had the Google dot bug in them”
Scattered Canary USES romance scam
Ronnie says Scattered Canary was involved in romance scams as well as BEC and unemployment fraud.
Explicit Direction flagged Confidence 98% · Ronnie Tokazowski EP 141 Details
“we know they were doing romance scams. We know they were doing unemployment fraud”