Cybercriminals are actively exploiting the recent earthquake in Venezuela, registering a significant number of new domain names in the immediate aftermath of the disaster. Threat intelligence firm WhoisXML API reported that 212 new domains referencing the earthquake were registered within five days of the event. This surge in registrations began on the same day the earthquake struck, with the highest number, 105, filed on the day following the disaster.
In contrast, the same company found no such earthquake-related domains registered in the three days prior to the event. The newly registered domain names often use language designed to appear helpful, with many referencing aid, donations, rescue efforts, or the earthquake itself. Some also mention affected people or promise services like medical help, shelter listings, or tracking.
While some of these domains may belong to legitimate aid organizations, researchers noted that a high percentage, 93%, lacked individual registrant contact information, with details obscured by privacy services or left blank. Alexandre François, a researcher, highlighted that some of these new websites are already soliciting Bitcoin donations without providing verifiable proof that the funds will reach victims.
This tactic of exploiting natural disasters for fraudulent purposes is not new. Similar patterns have been observed following events like Hurricane Harvey in 2017 and during the COVID-19 pandemic, where scammers impersonated aid organizations and facilitated money laundering through cryptocurrency. Even years after a disaster, fraudsters have been known to exploit lingering public sympathy, as seen in attempts to perpetrate "Nigerian Prince"-style scams following the 2011 Japanese tsunami.
The urgency created by natural disasters can make it easier for cybercriminals to exploit public generosity. To avoid falling victim to such scams, security experts advise individuals who wish to donate to a cause to directly type the known web address of a trusted charity into their browser, rather than clicking on links from social media or unsolicited emails.
It is also recommended to be suspicious of newly created websites, particularly those registered shortly after a disaster. Avoiding sites that exclusively request cryptocurrency donations is also advised, as legitimate charities typically offer traceable, conventional payment methods and are transparent about how funds will be used.
