We classified the collected websites into 3 categories based on how a website acts when the user lands the page. Content We observed these websites have been hosted statically without any redirection scripts or iframe embedded. All hyperlinks in the content were redirected to the URI /ping?s=[code] and via multiple sites to the eventual…
After analyzing the content of collected websites, we found that Type 1 and Type 2 websites provide the identical content of Bitcoin investment suggested as by the alleged “Alan Tam”. The layout of the page was also identical, with special crafted blog-like style. The following screenshot shows the layout of the content. Figure 1 Screenshot…
Data Collection StormEye began the investigation on 2 Sept 2019 and collected the related Facebook advertisements between 2 Sept 2019 and 13 Sept 2019. StormEye completed the analysing of the collected data on 18 Sept 2019 and has concluded 26 of them could be validated against the defined criteria, as shown below. All the validated…
In July 2019, StormEye, in its routine scouting over online security landscape, spotted irregularities in multiple Facebook advertisements related to Mr. Alan Tam’s investment of Bitcoin. The series of advertisements triggered StormEye’s alert system which ran on the back of Facebook softened the advertisement policy related to cryptocurrency and blockchain and the speech made by…