Pakistani firm shipped fentanyl analogs, scams to us

102 todsacerdoti 38 5/7/2025, 10:25:54 PM krebsonsecurity.com ↗

Comments (38)

walterbell · 22h ago
Turtles all the way down.

> the company’s most lucrative scam business: Hundreds of sites peddling fake college degrees and diplomas. People who purchased fake certifications were subsequently blackmailed by Axact employees posing as government officials.. “Axact took money from at least 215,000 people in 197 countries — one-third of them from the United States.. earning the company at least $89 million”.. a Pakistan district judge acquitted 24 Axact officials at trial due to ‘not enough evidence’ and then later admitted he had accepted a bribe (of $35,209) from Axact

adynaton · 21h ago
>Axact That name sounds familiar Darknet Diaries: 142: Axact

Episode webpage: https://darknetdiaries.com/episode/142

Media file: https://www.podtrac.com/pts/redirect.mp3/dovetail.prxu.org/7...

SOLAR_FIELDS · 20h ago
> FAZAL: Yeah, I thought the same; kind of creepy. But it’s far worse than that. I was talking with someone from another team and they said, go to facebook.com and try to log in with this e-mail and password. We were able to log in to these people’s Facebook accounts.

This is why MFA needs to be a requirement everywhere

dzhiurgis · 19h ago
Kinda ironic that social media sites do it better than your bank. My airline even has passkeys!
SOLAR_FIELDS · 16h ago
As a minimal social media user, do any social media sites actually require MFA these days? You can have the best security features in the world but if they are opt in and even a slight degradation of UX the vast majority of people will not adopt them. Security often needs to be beaten over the head of the populace to be successful. Let’s Encrypt and HTTPS in the browser is a good example of this.
SOLAR_FIELDS · 20h ago
Wow, quite cunning. Charge people to do something fraudulent, then double dip by charging them to not expose the fraud. It’s another variant of the classic scam of getting someone to do something illegal and then blackmailing them for it, but this one is extra creative because it charges people to do the illegal original thing!
profsummergig · 21h ago
One universal internet for the entire world was a mistake.

We need borders on the internet.

netsharc · 18h ago
In America, billionaires scam you!

With apologies to Yakov Smirnoff...

bryan0 · 21h ago
This part was also amusing:

> KrebsOnSecurity reviewed the Google Ad Transparency links for nearly 500 different websites tied to this network of ghostwriting, logo, app and web development businesses. Those website names were then fed into spyfu.com, a competitive intelligence company that tracks the reach and performance of advertising keywords. Spyfu estimates that between April 2023 and April 2025, those websites spent more than $10 million on Google ads.

morkalork · 21h ago
The one selling pick axes always wins
jfengel · 22h ago
Why bother selling actual fentanyl when you've got a thriving business selling fake homework help? Seems like a lot less overhead to manage.
whaleofatw2022 · 22h ago
Probably something about margin vs volume. One complicated transaction that could net a huge profit vs lots of smaller transactions that result in less overall profit despite same cost.

He'll ive seen legit businesses get burned on the same mindset. More than once. It's just in the legal transaction space, the risk shifts more towards 'delivering a crappy product' than, say, 'your employees get arrested' when you are forced to hit a deliverable.

SchemaLoad · 22h ago
Surely LLMs put the homework help industry out of business.
michaelbuckbee · 22h ago
Not joking, there's actually a lawsuit from one of the homework aid sites against Google as the AI Overviews are providing the answers that were previously been teased and upsold on their site.

Left unsaid in the filing was that it seemed like _most_ of the pages on the homework site were in fact scanned from copy written textbooks and then solved and they were trying to SEO rank for _exactly_ the question in the homework.

awesome_dude · 21h ago
Best "they're stealing our homework answers" lawsuit ever :)
ajkjk · 21h ago
More... money...
SanjayMehta · 20h ago
The two go together. Money laundering.

The high margin profits from the fentanyl are laundered as proceeds from the homework business.

golergka · 21h ago
Because for some it’s less important to earn money and more important to destabilise your geopolitical rival.
zoklet-enjoyer · 21h ago
People have been down voting me for years whenever I say this. It used to be so easy to buy fentanyl, cathinones, ketamine analogs, etc from China. Maybe it still is, I don't know
GuinansEyebrows · 21h ago
like Wu-Tang Financial said, you gotta diversify your bonds.
Havoc · 21h ago
[flagged]
golergka · 21h ago
That’s how they may be financing the terror.
LightBug1 · 21h ago
That's a good point. A little like the US and Israel's weaponry sales funding genocide.
throwaway48476 · 21h ago
Cross border/jurisdictional payments need to be insured and reversible. This will stop the scams.
foxglacier · 21h ago
Reversible by who? Not the payer or it'll create fraud in the other direction similar to credit card chargeback fraud or Ebay's "I didn't receive my item, give me my money back" fraud.
throwaway48476 · 21h ago
By the insurer. Credit card issuers are already privatized legal dispute courts.
TZubiri · 21h ago
I'm pretty sure institutional wires are reversible. Courts can also freeze accounts, the only weakpoint is absconding and quit scamming, but you lose the reputation of a whole bank in that.
throwaway48476 · 21h ago
Courts can freeze accounts within their jurisdiction. If a US scammer steals money the courts can reverse it. If an asian scammer does it there's no recourse, that's why it must be insured.
spwa4 · 9h ago
... and the Pakistani court sided with the scammers, after the judge was paid about $40000. So relying on the justice system doesn't help anyone here (and that's assuming you're willing to pay enough to run a court case on the other side of the world in the first place).
TZubiri · 5h ago
of course. But the court can freeze:

A- All accounts of the foreign company within their jurisdiction. i.e: foreign company can no longer do business with the state B- Freeze accounts of foreign bank, or order them to cover the remedy, C- Embargo country.

TZubiri · 21h ago
https://youtu.be/_uMEE7eaaUA?si=nar1NcXX1YHb4X5G

An interesting time to publish this, but no doubt Krebs was working on it before the India attack.

When I saw Krebs getting into international warfare politics, I thought he was out of his element, but doubtless he is pulling some relevant strings from the cyber aspect.

I'd be interested in seeing if he can get in on something close to the actual war like the NSO whatsapp exploits. So far Krebs has brought a lot of attention to scammers. But at any point he might make the jump and link cyber to actual attacks on life.