Fake CAPTCHAs and Keitaro: SMS and Crypto Fraud Scheme via TDS

Colleagues, note: Infoblox described a campaign where fake CAPTCHAs force users to send premium international SMS, while Keitaro TDS directs traffic to crypto and investment scams.

Key points:
• Mechanism: multi-step CAPTCHAs trigger SMS; 'Back' button interception used.
• Scale: 35 numbers across 17 countries, >120 Keitaro campaigns.
• Impact: hidden charges, carrier losses.
• Recommendations: monitor DNS/ad anomalies, block suspicious TDS, disable auto-SMS triggers.

Why it matters: the IRSF–TDS combination scales profitable fraud.

Which mitigation steps do you prioritize?

#cybersecurity #fraud #TDS #telecom