Sygnia uncovered a coordinated campaign of cloned law-firm websites comprising more than 150 related domains designed for evasion and persistence. The sites use multiple registrars, distinct SSL/TLS certificates, Cloudflare protection, and recycled phone numbers while promising free asset recovery to lure victims—if in doubt, examine the site’s depth. #Sygnia #Cloudflare
Keypoints
- Sygnia discovered a coordinated campaign of over 150 cloned websites impersonating law firms.
- The infrastructure favors evasion and durability, using multiple registrars, unique SSL/TLS certificates, and Cloudflare.
- Clones promise free asset recovery to re-victimize previous fraud targets and likely harvest exploitable information.
- Reused phone numbers appear across years of scams, indicating infrastructure reuse but not definitive proof of a single actor.
- AI and automation lower barriers to large-scale cloning, so organizations should search for clones and check site depth and logo reuse.