F-Secure Scam Tactics and Techniques Framework

This document is a technical report detailing the F-Secure Scam Tactics and Techniques Framework, which outlines how modern online scammers operate. The framework is designed to provide a systematic understanding of various types of scams and aims to build a comprehensive knowledge database about scam tactics and techniques. The report identifies seven broad tactics employed by scammers, including reconnaissance and target acquisition, resource development, victim contact and engagement, persistence of scams, access and exfiltration of information, lateral movement, and monetization. Each tactic is further broken down into specific techniques, totaling 32 groups. The document emphasizes the importance of understanding these tactics to develop defenses against scams. It also draws inspiration from the MITRE ATT&CK® framework, highlighting the structured approach to analyzing adversary behavior in the context of cybercrime.