Metapress: Exposing a Cunning Delivery Scam: An In-Depth Look CDEK
Originally published by
MetaPress
on January 21, 2022.
My investigation examines a real-world delivery scam impersonating CDEK.
It follows the attack from the initial social-engineering contact through
the fraudulent website and payment flow used to obtain victims’ card
details and verification codes.
The investigation covers domain impersonation, TLS and Cloudflare
infrastructure, phishing techniques, fake payment pages, 3-D Secure abuse,
and the indicators that helped identify the fraudulent operation.