Full Report
Officials said the five individuals concocted various long-running romance scams to trick U.S.-based victims into sending them money. The post Five alleged leaders of Black Axe’s operations in South Africa extradited to US appeared first on CyberScoop.
Analysis Summary
# Threat Actor: Black Axe (specifically the South Africa/Cape Town Zone)
## Attribution & Identity
* **Actor Identification:** Black Axe (also described as a transnational criminal organization).
* **Identified Individuals:**
* **Perry Osagiede:** Founder and leader of the "Cape Town Zone."
* **Franklyn Edosa Osagiede:** "Chief ihaza" of the zone.
* **Osariemen Eric Clement:** "Assistant eye" of the zone.
* **Collins Owhofasa Otughwor:** "Chief eye" of the zone.
* **Musa Mudashiru:** "Assistant butcher."
* **Known Associations:** A global, highly structured, hierarchical cybercrime group originally from Nigeria, with significant operations in South Africa and Spain.
## Activity Summary
The group has been active since at least 2011. Recent legal actions focus on a long-running campaign of internet-based fraud orchestrated from South Africa. In September 2026, five leaders were extradited to the U.S. to face charges related to romance scams and advance fee fraud. This follows significant international disruption efforts, including "Operation Jackal IV" and law enforcement actions in Spain targeting their financial networks.
## Tactics, Techniques & Procedures
* **Romance Scams:** Concocting fake identities to pose as love interests, relatives, or business partners to establish trust.
* **Social Engineering:** Fabricating "unfortunate events" (e.g., construction site accidents, delayed inheritances, medical emergencies) to request urgent loans.
* **Business Email Compromise (BEC):** Conducting adversary-in-the-middle scams to intercept business funds.
* **Extortion/Sextortion:** Threatening to distribute sensitive photos of victims who hesitate to send money.
* **Identity Theft:** Using stolen personal information and aggravated identity theft to facilitate fraud.
* **Money Laundering:** Using business entities and unauthorized access to victims' financial accounts to conceal and move illicit proceeds.
* **Crime-as-a-Service (CaaS):** Providing infostealing or fraud services to other criminals.
## Targeting
* **Sectors:** Private individuals (romance/inheritance scams), Corporate/Commercial (BEC/business fraud), and Transportation (vehicle trafficking).
* **Geography:** Primary focus on U.S.-based victims, with global operations spanning dozens of countries including South Africa, Nigeria, and Spain.
* **Victims:** Individuals targeted for emotional manipulation and businesses targeted for financial redirection.
## Tools & Infrastructure
* **Malware:** Infostealers and tools associated with "Crime-as-a-Service."
* **Infrastructure:**
* Shell business entities used for money laundering.
* Compromised financial accounts.
* Internet-based communication platforms for social engineering.
## Implications
Black Axe represents a significant transnational threat that bridges the gap between traditional organized crime and sophisticated cybercrime. Their hierarchical structure allows for large-scale, coordinated operations that generate billions of dollars annually. The group’s diversification—moving from romance scams into BEC and money laundering—indicates an evolving threat profile that impacts both individual financial security and corporate integrity.
## Mitigations
* **Public Awareness:** Education regarding the signs of romance scams and advance fee fraud (e.g., requests for money for "emergencies" from online-only acquaintances).
* **Financial Controls:** Implementing strict verification protocols for business wire transfers to mitigate BEC risks.
* **Account Security:** Utilization of Multi-Factor Authentication (MFA) to prevent unauthorized access to financial and personal accounts.
* **Victim Reporting:** The FBI and U.S. Secret Service encourage potential victims to report suspicious activity via official channels to assist in mapping the group’s financial infrastructure.