'Industrial-scale scam operations': Global criminal organization operated slave compounds in Asia behind huge malware-as-a-service hydra targeting 35+ government agencies monthly

Date:
Mon, 13 Apr 2026 17:25:00 +0000

Description:
Shocking report claims forced labor used to distribute malware in Cambodian compounds.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Tech Radar Pro Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Become a Member in Seconds Unlock instant access to exclusive member features. Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. You are
now subscribed Your newsletter sign-up was successful Join the club Get full access to premium articles, exclusive features and a growing list of member rewards. Explore An account already exists for this email address, please log in. Subscribe to our newsletter Infoblox & Chong Lua Dao uncover global MaaS platform Spoofed domains harvest KYC data, intercept SMS, drain bank accounts Captive workers trafficked into Cambodian scam compound tied to elites
Malware operators - people sending phishing emails and guiding people through the infection chain - dont always do it on their own free will - sometimes they are trafficked into scam centers and forced to work there.

One such global criminal organization was uncovered by security researchers Infoblox Threat Intel , and Vietnamese non-profit Chong Lua Dao, who recently observed a spike in anomalous DNS traffic across Infoblox customer networks, which led them to a previously undocumented malware-as-a-service (MaaS) Platform. Further investigation uncovered that the platform registers roughly 35 new domains each month, and is active in at least 21 countries including Indonesia, Thailand, Spain, and Turkey. Article continues below You may like How a Cambodian scam center used fake offices to deceive victims The silent DNS malware thats redefining email and web-based cyberattacks 'Cybercriminals are industrializing deception': new report reveals how major global
cybercrime syndicates have infiltrated trusted domains with millions now at risk - here's what you need to know Political and military ties The domains spoof legitimate government and banking websites. Victims that download the fake software are required to go through the Know Your Customer (KYC)
process, during which the attackers harvest personal data, biometrics, and more.

Once installed, the malware grants the attackers control over the device, including intercepting SMS messages for one-time passcodes, and using actual banking apps to wire money out.

At the same time, several captive workers contacted Chong Lua Dao, requesting rescue from K99 Triumph City - a compound in Sihanoukville, Cambodia that was previously flagged by the UN for large-scale fraud and forced labor.

After being rescued, they shared closed-group chat logs, screenshots, and other data that confirmed a service-based malware distribution and scam operation was running on associated infrastructure, and that several tracked domains were being used in the scam. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me
with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

The research also uncovered that there is a small, tight-knit group of politically connected individuals that control who gets access to the K99 compound. This centralized organization has people at the top with political cover and the most significant name that surfaced is Senator Kok An.

Apparently, he's a well-known figure in Sihanoukville's casino and real
estate world, and his name has appeared in multiple reports connecting the city's gambling and organized crime infrastructure to political power. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.



======================================================================
Link to news story: https://www.techradar.com/pro/security/industrial-scale-scam-operations-global -criminal-organization-operated-slave-compounds-in-asia-behind-huge-malware-as -a-service-hydra-targeting-35-government-agencies-monthly


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)