Researchers at Cyjax have released a report outlining a new threat actor named Fangxiao. According to research the group is behind the creation of 42,000 domains that impersonate at least 400 major brand across the world. The for-profit group has been around since 2017, and uses their created websites to drive traffic to them, making a profit either through their web visits or by directing traffic to the websites of others. All of the websites are used to impersonate brands and set up scams such as winning free products or offering free software in order to persuade the victim to download the Triada Trojan or other malware.
By Anthony Zampino Introduction Leading up to the most recent Russian invasion of Ukraine in