Fraudulent Microsoft Accounts Soar to 750 Million, Thanks to Cybercriminals

Greasy Opal, established in the Czech Republic in 2009, is reputed for its role in the cybercrime landscape as a provider of advanced tools designed to circumvent security measures and facilitate cyber attacks.

Specializing in sophisticated machine learning solutions, Greasy Opal’s primary offerings are engineered to overcome CAPTCHAs and execute large-scale bot attacks, including volumetric and brute-force operations. These tools are used to engage in various nefarious activities, such as unauthorized account access and the creation of fake accounts across different platforms.

Recent investigations by Arkose Labs’ threat research team, ACTIR, uncovered that Greasy Opal’s technologies were instrumental in the creation of over 750 million counterfeit Microsoft accounts. While Greasy Opal does not directly conduct cyberattacks, its products are utilized by a diverse clientele, including malicious actors and CAPTCHA-bypassing services.

ACTIR’s analysis reveals that the adoption of Greasy Opal’s tools allows cybercriminals to swiftly deploy expansive bot networks, exacerbating the global threat of sophisticated cybercrime. This role has positioned Greasy Opal as a significant player in the evolving landscape of digital security threats.

Greasy Opal offers cost-effective solutions for CAPTCHA solving, with prices ranging from $70 for a basic toolkit to $190 for an extensive package. Additionally, a $10 monthly subscription is available, underscoring why their tools are prevalent in social media manipulations and various online sectors, including gaming, finance, and gig economy platforms.

The company’s toolkit, compatible with custom browsers, integrates with broader automation systems such as Bablesoft’s Browser Automation Suite (BAS), simplifying attackers’ operations. ACTIR estimates that Greasy Opal’s revenue for 2023 could reach $1.7 million, with their tools being linked to substantial cybercrimes, including the creation of 750 million fake Microsoft accounts attributed to Storm-1152 from Vietnam.

ACTIR is actively working to counteract the threats posed by Greasy Opal’s AI-driven tools by developing new CAPTCHA technologies and employing strategies to expose weaknesses in their machine learning models. Despite their innovations, Greasy Opal’s reliance on CPU-based systems rather than GPU-based ones may limit their scalability and present potential risks.

More Articles & Posts