survey scams have gained popularity, but the criminals behind it seem
to be more versed in social engineering than in operational security.
The pattern of the scam is similar to campaigns observed on Facebook,
where victims are lured into clicking on a link – usually with the
promise of a substantial prize – that takes them in a merry-go-round of
short links to surveys aimed at collecting their personal information.
The scammers appear to often leave their servers wide open, allowing researchers to access all the content, monitor their activity and collect information for identifying indicators.