That's exactly what they do. One of the scams involves looking up WHOIS for thousands of domains and sending false domain renewal bank slips ("boletos"). Some

That's exactly what they do. One of the scams involves looking up WHOIS for thousands of domains and sending false domain renewal bank slips ("boletos"). Some will pay and never notice it's a scam. What the article describes is a more sophisticated method using a malware though.