New Methods of Obfuscation in Fraud/Carding Community

A recent RedSense investigation has discovered a prevalent trend in cyberfraud groups: IP address obfuscation via a new cloaking methodology. The primary channel for dissemination of new methods such as this are Telegram chats, particularly channels that have a sizeable number of subscribers with technical knowledge.

Traditionally, cybercriminals involved in fraudster and carding activities will either leave the IOC (Indicator of Compromise) visible or only use basic obfuscation methods such as encoding or encryption to cloak them. However, the newly identified method takes a more sophisticated approach, providing a “legal” way to hide IP addresses.

Full Article