Amid increasing regulatory pressure, a global cybercrime network continues to evolve its tactics to sustain operations and avoid detection.
Triad Nexus, an illicit cybercrime group, has reportedly strengthened its activities despite sanctions imposed by the United States on the Philippines-based Funnull content delivery network last year. The network has adopted advanced methods such as infrastructure laundering, geofencing, and the use of front companies to expand its reach, particularly in emerging markets.
According to a cybersecurity research firm’s analysis, the group continues to rely on AS152194 (CTG Server Limited) as a core part of its infrastructure. At the same time, it has started leveraging major cloud platforms, including services from Microsoft, Google, Amazon, and Cloudflare, to acquire accounts that make its fraudulent operations appear more legitimate.
The network has also been involved in spoofing websites of several well-known organisations, including Bank of America, MoneyGram, eBay, TripAdvisor, and Vietnam Post. These tactics are aimed at deceiving users and enabling large-scale fraud operations.
To reduce exposure and avoid enforcement actions, Triad Nexus has implemented geofencing measures that block access from U.S.-based IP addresses. This shift allows the group to operate with lower risk while continuing to expand globally.
“As the network continues to withdraw from direct U.S. exposure to avoid detection, it has been pivotally expanding into the Spanish, Vietnamese, and Indonesian markets. Using localized templates to target these regions, its goal is to ensure its illicit profits continue to flow,” researchers noted.
The findings highlight how cybercrime networks are becoming more adaptive, using global infrastructure and localized strategies to sustain operations despite international sanctions.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream LinkedIn | The Mainstream Facebook | The Mainstream Youtube | The Mainstream Twitter
About us:
The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.





