Pig Butchering-as-a-Service: How “Penguin” Industrialized Global Fraud

The world of “pig butchering” scams has evolved from chaotic boiler rooms into a streamlined, automated service economy. A new report from Infoblox reveals how the “Pig Butchering-as-a-Service” (PBaaS) model is empowering criminals to launch industrial-scale fraud operations with the same ease as signing up for a software subscription.

The report details how specialized service providers are now selling everything from victim data to turnkey trading platforms, lowering the barrier to entry for aspiring fraudsters globally.

Central to this new economy is a service provider tracked as “Penguin” (also known as Heavenly Alliance or Overseas Alliance). This group operates as a one-stop-shop for scammers, selling “fraud kits, scam templates, and other solutions”.

Penguin’s inventory is distressingly comprehensive. It includes:

• “Shè gōng kù” (Social Worker Database): Massive troves of personal data on Chinese citizens, including “years of bank records and travel history,” used to identify high-value targets.
• Stolen Western Accounts: Verified accounts for Tinder, WhatsApp, and Apple developers, sold for pennies.
• “Character Sets” (Ren She Tao Tu): Curated packages of photos and videos stolen from social media influencers, allowing scammers to construct consistent, attractive personas to lure victims.
• SCRM AI: A “Social Customer Relationship Management” tool that automates victim engagement, streamlining the grooming process.

While Penguin provides the tools to find and hook victims, other providers like UWORK supply the infrastructure to rob them. UWORK offers a sophisticated Customer Relationship Management (CRM) platform that allows scam bosses to manage hundreds of victims and agents simultaneously.

This platform is not theoretical; it was “leveraged by Chinese criminal actors to steal in excess of US$13M” in a case prosecuted in the United States in early 2025.

The UWORK system allows criminals to deploy fake trading websites that look indistinguishable from legitimate platforms like MetaTrader. These sites even feature “Know Your Customer (KYC)” panels to harvest victim identity documents, adding another layer of theft to the financial fraud.

The shift to a service-based model has dangerous implications. It allows criminal syndicates to scale rapidly without needing deep technical expertise. “These providers have created a robust, booming pig butchering-as-a-service (PBaaS) economy—not all that different from well-known malware and phishing-as-a-service… models,” the report notes.

Related Posts:

• 300,000 Forced to Scam: Meta’s Report Reveals Staggering Scale of “Pig Butchering”
• “Pig Butchering” Scam: Cybercriminals Prey on Mobile Trading Enthusiasts
• 100 hacking organizations aimed at sabotaging the British economy and stealing government secrets
• Pig Butchers Enter the Gig Economy, Targeting Job Seekers in Cryptocurrency Scams