Master of fraud: Alleged 'Nagoyo scam' brains also behind GCash phishing modus

Master of fraud: Alleged ‘Nagoyo scam’ brains also behind GCash phishing modus

The Filipino hacker supposedly behind the “Mark Nagoyo” scam that targeted BDO Unibank depositors has also been tagged in stealing the personal information of GCash users.

Jherom Anthony Diawan Taupa, who was nabbed by the National Bureau of Investigation (NBI) along with four other suspects, is reportedly involved in the creating phishing sites, which are used to harvest the personal information of unsuspecting netizens.

Natumbok din! 2 Nigerians, 5 Pinoys nabbed over BDO ‘Nagoyo’ scam

Hackers are able to obtain sensitive information, such as usernames and passwords, by making phishing websites similar to the legitimate websites of banks and other financial institutions.

The NBI’s informant said Taupa’s phishing site mimicked the appearance of GCash’s website.

No report of missing P80K: BDO fact checks Tiktok user claiming to be a ‘Nagoyo’ hack victim

“Accordingly, Taupa modified the code in order to gather the log in details of unwitting victims who would access the scam page in the mistaken belief that they were opening Gcash’s official portal,” the NBI said, adding that the informant showed proof about his past transactions with the suspected scammer.

Taupa was arrested in a buy-busy operation in which the informant was supposed to pay him P2,000 in exchange for a phishing site. The hacker then admitted that he sells fake GCash websites for money.

Follow the money: NBI hot on heels of culprits behind ‘Nagoyo’ hack

“Further investigation revealed that Subject Jherom Taupa is involved in a group heist, being the one sending the emailing list containing personal details of various bank customers to a group of individuals responsible for sending email to the former. The said email contains a link which when clicked, will be used for the hacking process of the heist group,” the NBI added.


Leave a Comment

eight − 6 =

This site uses Akismet to reduce spam. Learn how your comment data is processed.