Threat Intel
FTC sues Digital Forensics Corp for $60M sextortion scam
FTC has filed a complaint against Digital Forensics Corp and affiliates for scamming sextortion victims, claiming $60M in fraudulent payments. The company advertised services that never delivered and fabricated evidence. A federal court has temporarily halted their operations.
What happened
FTC filed a complaint against Digital Forensics Corp and affiliated entities for scamming sextortion victims, collecting $60M. They advertised on Google, YouTube, X, and other platforms, promising to locate blackmailers and provide evidence.
Impact
Victims paid $1,499-$20,000 for "Phase 1" services that never delivered. The company fabricated evidence, altered account settings, and pressured for additional payments. A federal court has temporarily halted their operations.
What defenders should do
- Verify any third‑party recovery service before engaging.
- Check for independent reviews, certifications, and evidence of law‑enforcement collaboration.
- Ensure services do not alter account settings or provide false evidence.
- Report suspicious advertising to FTC or relevant authorities.
Mitigation steps for organizations
Educate staff about sextortion scams, especially those seeking help from external vendors. Monitor for unusual outbound traffic or account changes that may indicate a fraud attempt. Maintain a clear policy on third‑party incident response engagements.
Related articles
Digital Forensics Corp. Fraud: $60M in Sextortion Scam
Digital Forensics Corporation (DFC) scammed victims of sextortion by charging up to $20,000 for nonexistent services, amassing at least $60 million between 2023 and 2026. The FTC has issued a temporary injunction and warns defenders to verify third‑party claims and report fraud.
Read briefing
Disruption of Chinese Phishing Kit Ecosystem: Storm-2990 & YAM Store
Microsoft’s Digital Crimes Unit exposed a Chinese‑language phishing kit ecosystem, including the Storm‑2990 developers and the YAM Store marketplace (Storm‑3119). The network distributed over 1 billion phishing emails and SMS to more than 75 000 organizations in healthcare, finance, wholesale, and IT sectors across Japan, the U.S., Australia, and India. Defenders should block known phishing kit domains, monitor for compromised cloud credentials, and apply Microsoft Defender detections.
Read briefing
Shopify Shop App Fake Refund Scam Targets Users – Immediate Defensive Actions
A phishing‑style scam is exploiting the Shopify Shop app by sending fake refund requests that appear legitimate. Merchants risk approving non‑existent refunds, leading to financial loss. Defenders should verify refund authenticity, update the app, enforce 2FA, and monitor for suspicious activity.
Read briefing
Saudi Manpower Provider Scam: 1,001 Fake Domains Identified by Group‑IB
Group‑IB uncovered 1,001 domains used in a phishing campaign that impersonated a Saudi manpower provider, targeting users in KSA. Defenders should block these domains, update filtering rules, monitor for new registrations, and educate users to mitigate credential theft and potential malware delivery.
Read briefing