Sniper Dz: Scammers Target MENA Users via Fake Facebook Accounts and Browser Notifications

Colleagues, a cybersecurity alert: Group‑IB describes the Sniper Dz campaign where fake Facebook accounts in the MENA region lure users to phishing and monetization sites.

Key points:
- attackers use Linkbio/Linktree as an intermediary;
- pages request notification permissions (same VAPID keys) and employ back‑button hijack and tab‑under;
- traffic routed through TDS leads to premium SMS, paid calls and investment scams.

Why it matters: attackers abuse legitimate web features, making detection difficult.

What practical measures do you apply against such schemes?

#cybersecurity #phishing #browser #onlinefraud