Triad Nexus Expands Fraud Operations Despite US Sanctions, Targeting Emerging Markets
Triad Nexus, a cybercrime network responsible for over $200 million in reported losses, has expanded its operations and refined its tactics following US Treasury sanctions in 2025. The group continues to run large-scale investment scams and brand impersonation campaigns, shifting its focus towards emerging markets. According to research from Silent Push, Triad Nexus has strengthened its operational security by introducing geographic restrictions that block US-based investigators and adopting complex infrastructure to mask its activities. The network has scaled its fraud ecosystem, with average victim losses reaching $150,000. A key development is the group's use of 'infrastructure laundering,' relying on compromised cloud accounts from major providers like AWS, Cloudflare, Google, and Microsoft to host malicious services. This allows them to blend scam platforms with legitimate traffic, creating high-performance sites that are difficult to distinguish from legitimate ones. The network has also industrializ...