• Hack-for-hire groups used spear phishing emails to steal login credentials.
• Created fake websites resembling legitimate services to deceive targets.
• Accessed sensitive data for financial gain and corporate espionage, affecting stock market stakeholders.

5. Dark Basin Hack-for-Hire Operations (2015–2020)

Steps of the Fraud:

1. Spear Phishing Campaigns:
   • The group known as Dark Basin conducted targeted phishing attacks against individuals and organizations, including those in India.
2. Credential Theft:
   • Victims were lured into providing login credentials through deceptive emails and fake websites resembling legitimate services.
3. Unauthorized Data Access:
   • Stolen credentials were used to access sensitive information, which was then exploited for various purposes, including corporate espionage.
4. Global Reach:
   • The operation targeted thousands of individuals across six continents, affecting numerous sectors.