Connect with us

News

Widespread Phishing Scam Discovered In Saudi Arabia

Group-IB, a global cybersecurity firm, has published research into a scheme where scammers impersonate one of the leading manpower agencies in Saudi Arabia.

Published

on

widespread phishing scam discovered in kingdom of saudi arabia

Analysts from a leading cybersecurity firm, Group-IB, have uncovered a massive phishing scam operation meant to impersonate one of the Kingdom of Saudi Arabia’s top recruitment agencies.

The cybersecurity team found at least 1,000 malicious domains during their research, with most containing a close match to a well-known Saudi agency that offers assistance in hiring employees for the construction and services sector, as well as domestic workers. Scams of this nature are growing at a rate of 10% per year, with more than $55 billion stolen during 2021 alone.

rogue domains detected in saudi arabia scam campaign

How The Scam Worked

The fake domains and their associated URLs were meant to fool people into thinking they’re the real deal. In addition, each domain featured convincing web pages designed to mimic the official agency website. Scammers were using these web pages to convince people to enter their data, hoping to harvest banking details, as well as both login information and two-factor authentication (2FA) codes.

how the saudi arabia manpower scam campaign works

To drive traffic to these fraudulent websites, the criminals used multiple layers of social engineering, first using ads on Facebook, Twitter, and Google that encouraged SMS or WhatsApp conversations, and then sending unwitting users to the fake sites to enter their details.

Once a user had landed on a fake domain, they were persuaded to part with a small processing fee of 50 or 100 SAR (approximately $13 or $27), which enabled the scammers to harvest banking data to empty accounts and make off with user’s hard-earned cash.

Also Read: Is Your Phone Hacked? How To Find Out & Protect Yourself

“Scammers are becoming increasingly resourceful and collaborative, and spoof domain brokers are actively assisting cybercriminals. We encourage companies and organizations to monitor for signs of brand abuse, and we also urge internet users to remain vigilant so that they do not become victims of scams such as this,” says Mark Alpatskiy, CERT-GIB Senior Analyst.

Falling victim to a phishing scam can be costly, and Internet users are urged to show caution and always check URLs to verify they are legitimate before entering any personal data, as well as ensuring they are in communication with online chat services or call centers of the official company in question.

Advertisement

📢 Get Exclusive Monthly Articles, Updates & Tech Tips Right In Your Inbox!

JOIN 23K+ SUBSCRIBERS

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

Visa’s Return To Syria Starts With A Test And A Bank In Lebanon

Foreign visitors will be the first users to benefit, but whether Syria’s own banks and cardholders follow is still an open question.

Published

on

visa's return to syria starts with a test and a bank in lebanon

Visa is returning to Syria. Its first live international card transaction in the country was a test rather than a launch, and the milestone event ran through a Lebanese bank.

The acquirer (the bank on the merchant’s side of a card payment) was Fransabank Lebanon, with Paymera as the other named partner. Nadim Moujaes, who heads a Fransabank Group subsidiary, describes the test as both the culmination of “longstanding efforts to link Syria back to international payment networks” and “the first step in a larger path”.

“We are excited to have successfully tested live transactions today as we plan to enable international visitors to use their Visa cards while in Syria,” says Leila Serhan, Visa’s senior vice president and group country manager for the North Africa, Levant and Pakistan region. Although a significant first step, that plan doesn’t come with a hard date for when a visitor’s card will work normally.

Mohammed Safwat Raslan, governor of the Central Bank of Syria, says the test paves the way for international card acceptance in Syria and that maintaining strong compliance, risk management and operational controls will remain essential. Serhan likewise stresses that Visa has worked within applicable legal, regulatory and compliance requirements. For a test transaction, it seems there was a great deal of attention paid to the rules, with the entire operation being carefully managed.

Also Read: Lebanon’s 5G Era Begins With 150 Stations And A $1M Budget

The test is the latest step in a sequence that began in December 2025, when Visa announced a strategic roadmap to support Syria’s integration into the global digital economy. In February 2026 it hosted its first industry gathering of banks, ecosystem partners and policymakers in Damascus and, the same month, signed an agreement with Syria’s Ministry of Communications and Information Technology in San Francisco.

Michel Kattouah, Paymera’s CEO, called the test “the return of international card acceptance,” but while that’s positive news, there’s no word yet on when a Syrian bank will issue a Visa card to a Syrian customer.

Continue Reading

#Trending