ONE-ISAC and Silent Push Webinar
Topic: How to Mitigate -Energy Company Investment and Job Schemes
Abstract: In 2024, Siemens Energy began publicly warning of a wave of fraudulent pyramidal investment and job scams that exploited its name and branding. Operating through a combination of deceptive websites, social media groups, and Telegram channels, the schemes have been targeting individuals primarily across Asian countries, including Bangladesh, Nepal, and India.
Pivoting off details, Silent Push investigated a series of domains used in 2024 and found a fingerprint to track this ongoing malicious campaign, which we are dubbing “Power Parasites.”
Specific Energy Companies were also targeted, and have both issued warnings to customers and potential job seekers about the fraudulent hiring and investment scams impersonating their brands. This campaign remains active, targeting prominent brands.
-
This presentation went over all the details Silent Push didn’t make public in our blog post on Power Parasites, including exactly how we track these campaigns.
-
Silent Push showcased both the job and investment scams that are targeting energy companies, as well as a few major brands.
-
Silent Push provided private queries being used to track this threat.
-
Silent Push also highlighted another separate investment scam that was abusing a well-known brand and how this campaign can be tracked.
Speaker: Zach Edwards, Senior Threat Analyst, Silent Push
Biography:
Zach is passionate about Data Privacy, is active in numerous communities, and has been involved in high-profile GDPR complaints, including cases against online dating apps and Google auction systems. Zach has presented at high-profile events, including a 2023 Blackhat USA session titled, “Kids in the Ad Fraud Crosshair: Why International Threat Actors are Targeting Children to Steal Money from Banks and Major Corporations.” In 2024, Zach presented at PIVOTcon, Virus Bulletin, MWISE, FIRST Monaco, BSides SF, and RISE SF on various cyber threats.