myGov shuts down thousands of accounts linked to ‘scam-in-a-box’ fraud kits from the dark web!
- Replies 35
We’ve all heard horror stories about how scams have become increasingly widespread and sophisticated over the past few years, but this one is truly quite frightening.
Each month, a substantial number of myGov accounts are being suspended due to concerns that they may have fallen prey to illicit ‘scam-in-a-box’ kits sold by cybercriminals on the dark web.
These kits are used to fabricate counterfeit websites and provide the specialised knowledge needed to launch phishing attacks on government platforms.
Since the beginning of this year, there have been more than 4,500 confirmed instances of myGov scams, leading to numerous account suspensions due to suspected fraudulent activity—thanks to the kits.
What’s truly concerning is that some of these ‘scam-in-a-box’ kits are not just simple tools; they come equipped with security features that enable wrongdoers to run multiple scams simultaneously, swiftly closing them to avoid detection.
To make matters worse, in certain cases, these malicious actors can even distinguish more tech-savvy users and redirect them to the official myGov website.
It’s worth noting that many of these fraudulent websites bear a striking resemblance to genuine ones, making it even more challenging to spot the deception.
Bill Shorten, the Minister for Government Services, voiced his worry, highlighting that Australians have lost $3.1 billion to scams this year.
However, he said that this issue is now receiving significant attention from the authorities.
‘These fake sites and criminal gimmicks like “scams in a box” trick our citizens into giving criminals their user ID and passwords,’ said Shorten.
‘The problem with these hacks, and the proliferation of phishing scams we now see, is that increasing amounts of stolen identifying details end up on the dark web.’
Cybercriminals often find these scams appealing because a significant number of Australians tend to use a single password for their various accounts. These attacks demand minimal effort while promising a substantial reward.
One scam advertisement encourages potential buyers, highlighting that the majority of Australians possess a myGov account.
The simple instructions entail requesting login credentials and ensuring that the Australian Tax Office is linked to the target account.
‘Statistics show that people reuse passwords at least 50 [per cent] of the time, making it possible for scammers and hackers to use the stolen password to access other online services,’ Shorten said.
‘myGov is now the number one digital government service used by Australians, and Services Australia is working around the clock to counter scammers and hackers attacks.’
However, it is anticipated that operators offering ‘scam-in-a-box’ kits will persist in targeting myGov until the government completes its ongoing overhaul of the ID verification process, which is currently in its final stages.
‘The Albanese government is determined to disrupt malicious actors by bolstering online defences,’ Shorten added.
‘I am also working closely with my ministerial colleague, Senator Katy Gallagher, to establish a digital ID that will be a key line of defence against cybercrime when established.’
Last year, the government officially acknowledged its deliberation on the utilisation of myGov or its myGovID system to streamline digital identity verification, particularly in light of the Optus breach.
Optus, the Australian telecom company, suffered a data breach revealing personal information, such as passport and license numbers, home addresses for 2.8 million customers, and the birthdates, email addresses, and phone numbers of seven million customers.
You may read the full story here.
In August, the Australian Tax Office issued a cautionary advisory, urging individuals to exercise caution when encountering emails and text message scams that guide them to counterfeit myGov websites.
These deceptive messages commonly informed recipients of a purported tax refund or prompted them to verify their bank account, ultimately directing them to a fraudulent website.
The trade of sensitive identification data on the dark web has presented a persistent challenge over the years. In 2017, Guardian Australia brought attention to the sale of Medicare patient information, achieved through the ‘exploitation of a vulnerability’ within a government system.
Subsequently, in 2019, documented cases of dark web vendors providing Medicare details.
Members, what are your opinions regarding the government’s efforts to suspend fake myGov accounts, and what other steps do you believe both the government and the public should take to counter the spread of ‘scam-in-a-box’ kits on the dark web?
Share your thoughts in the comments below!
Each month, a substantial number of myGov accounts are being suspended due to concerns that they may have fallen prey to illicit ‘scam-in-a-box’ kits sold by cybercriminals on the dark web.
These kits are used to fabricate counterfeit websites and provide the specialised knowledge needed to launch phishing attacks on government platforms.
Since the beginning of this year, there have been more than 4,500 confirmed instances of myGov scams, leading to numerous account suspensions due to suspected fraudulent activity—thanks to the kits.
What’s truly concerning is that some of these ‘scam-in-a-box’ kits are not just simple tools; they come equipped with security features that enable wrongdoers to run multiple scams simultaneously, swiftly closing them to avoid detection.
myGov suspends numerous accounts due to ‘scam-in-a-box’ kits from the dark web. Image source: Pixabay
To make matters worse, in certain cases, these malicious actors can even distinguish more tech-savvy users and redirect them to the official myGov website.
It’s worth noting that many of these fraudulent websites bear a striking resemblance to genuine ones, making it even more challenging to spot the deception.
Bill Shorten, the Minister for Government Services, voiced his worry, highlighting that Australians have lost $3.1 billion to scams this year.
However, he said that this issue is now receiving significant attention from the authorities.
‘These fake sites and criminal gimmicks like “scams in a box” trick our citizens into giving criminals their user ID and passwords,’ said Shorten.
‘The problem with these hacks, and the proliferation of phishing scams we now see, is that increasing amounts of stolen identifying details end up on the dark web.’
Cybercriminals often find these scams appealing because a significant number of Australians tend to use a single password for their various accounts. These attacks demand minimal effort while promising a substantial reward.
One scam advertisement encourages potential buyers, highlighting that the majority of Australians possess a myGov account.
The simple instructions entail requesting login credentials and ensuring that the Australian Tax Office is linked to the target account.
‘Statistics show that people reuse passwords at least 50 [per cent] of the time, making it possible for scammers and hackers to use the stolen password to access other online services,’ Shorten said.
‘myGov is now the number one digital government service used by Australians, and Services Australia is working around the clock to counter scammers and hackers attacks.’
However, it is anticipated that operators offering ‘scam-in-a-box’ kits will persist in targeting myGov until the government completes its ongoing overhaul of the ID verification process, which is currently in its final stages.
‘The Albanese government is determined to disrupt malicious actors by bolstering online defences,’ Shorten added.
‘I am also working closely with my ministerial colleague, Senator Katy Gallagher, to establish a digital ID that will be a key line of defence against cybercrime when established.’
Last year, the government officially acknowledged its deliberation on the utilisation of myGov or its myGovID system to streamline digital identity verification, particularly in light of the Optus breach.
Optus, the Australian telecom company, suffered a data breach revealing personal information, such as passport and license numbers, home addresses for 2.8 million customers, and the birthdates, email addresses, and phone numbers of seven million customers.
You may read the full story here.
In August, the Australian Tax Office issued a cautionary advisory, urging individuals to exercise caution when encountering emails and text message scams that guide them to counterfeit myGov websites.
These deceptive messages commonly informed recipients of a purported tax refund or prompted them to verify their bank account, ultimately directing them to a fraudulent website.
The trade of sensitive identification data on the dark web has presented a persistent challenge over the years. In 2017, Guardian Australia brought attention to the sale of Medicare patient information, achieved through the ‘exploitation of a vulnerability’ within a government system.
Subsequently, in 2019, documented cases of dark web vendors providing Medicare details.
Share your thoughts in the comments below!
Last edited by a moderator:
.png){kind=icon}
