CyberSIXT Search
Original
Image: SecurityOnline

SecurityOnlineDdos

Pig Butchering-as-a-Service: How “Penguin” Industrialized Global Fraud

The world of pig butchering scams has evolved into a streamlined, automated service economy, with Pig Butchering-as-a-Service (PBaaS) enabling criminal operations to scale like software subscriptions. According to Infoblox, specialized service providers now sell everything from victim data to turnkey trading platforms, lowering the barrier to entry for fraudsters worldwide.

Central to this economy is a service provider tracked as “Penguin” (also known as Heavenly Alliance or Overseas Alliance), described as a one-stop shop for scammers that sells fraud kits, scam templates and other solutions. Penguin’s inventory includes the Shè gōng kù social worker database, stolen Western accounts for Tinder, WhatsApp and Apple developers, and curated “Character Sets” of influencer-sourced photos and videos, all feeding into automatic engagement via a SCRM AI tool.

The UWORK platform, supplied by another provider, supports hundreds of victims and agents, and was leveraged by Chinese criminal actors to steal in excess of US$13M in a United States case prosecuted in early 2025.

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device