Fake Government Websites Used to Scam Users in Central Asia

Cybersecurity firm F6 has uncovered a large scam campaign using more than 360 fake government and news websites to target people in Uzbekistan, Belarus and Tajikistan. The sites falsely promise cash payments or passive income through government assistance programs, tricking visitors into submitting their contact details.

Once someone fills out a form on these fake sites, scammers follow up by phone or email, posing as program managers. They may request a processing fee, ask for further personal details, or push victims to install a mobile app supposedly needed for identity verification. In reality, this app is malware that can give attackers control of the victim's device and potentially access to their financial accounts. Some victims are also asked to submit passport scans, which can then be used for identity theft, unauthorised loans, or further phishing attacks.

The scam sites are designed to closely mimic the look and language of legitimate government portals and news outlets, making them convincing to unsuspecting visitors. F6 has not identified who is behind the campaign, and the scale of victim impact remains unclear.