The number of criminals selling fake vaccination certificates on Telegram is increasing

Currently there are over 2,500 active Telegram groups selling fake vaccination certificates. The average number of followers of these groups is 100,000 subscribers and in some cases it reaches 450,000. Likewise, the range of countries for this type of crime has widened. It started strongly in the United States, the United Kingdom and Germany, and today it reaches Switzerland, Pakistan, the Netherlands, Italy, Greece, Indonesia or France.

The data comes from a report by Check Point Research (CPR) who observed a 257% increase in the number of sellers using Telegram to advertise fake vaccination cards for those who do not want to be vaccinated. So by 100 USD, it is possible to acquire false certificates from NHS (UK National Health Service) or certificate Digital COVID of the European Union.

Cybercriminals are organized into groups on Telegram. Some of them, they exceed 450,000 subscribers. Vendors see this messaging service as a much more efficient way to expand distribution. Indeed, vaccination certificates can be purchased for almost any country. Most are sold in European countries.

it is possible to find Ads on Telegram aimed specifically at people who do not wish to receive the vaccine. One of the advertisements analyzed in the report stated: “We are here to save the world from this toxic vaccine.” The advertisements ensure that the vaccination certificates they offer are recorded and verified in the NHS system and the EU database, among others.

To make payment, cyber criminals mainly accept payment through Pay Pal and of cryptocurrencies such as Bitcoin, Monero, Dogecoin, Litecoin, and Ethereum, among others. In addition, in other cases, gift cards are accepted from Steam, Amazon and eBay.

According to the CPR, in March of this year, most fraudulent COVID-19 certificates were announced on the darknet. Currently, have found that most black market activity is focused on Telegram. Researchers suspect that the switch to this messaging service has helped cybercriminals step up their distribution efforts, reaching more consumers, faster.

“The use of Telegram is less technical compared to the darknet and can reach a disproportionate number of people, quickly. We believe the growth in the market is due to the rapid spread of the Delta variant and the urgency for everyone to get vaccinated, ”says Oded Vanunu, head of product vulnerability research at CPR.

The darknet is the internet’s black market and is often involved in transactions related to drugs, cyber weapons, counterfeits, etc. The groups there are now operating on Telegram. One of the first basic tips for all users is don’t get involved with sellers that they post in said groups of the messaging service or in the published markets of the darkweb.

Another important measure for the entities that produce the certificates is use encryption. All “green passes” and vaccination certificates must be managed and encrypted in a secure manner by the official authorities of each country, making it possible to scan a QR code, which can be authenticated.

In this sense, it is also important foster cooperation between states, to share information related to this data and create a secure repository with encryption keys, to allow people to move around using legitimate certifications, detecting falsified ones.

KEEP READING: