Fake GTA 6 leaked copy scam drains your crypto wallet on arrival
A fake site disguised as a GTA 6 fan countdown page is offering a "leaked copy" of the game for $50 or about 1 SOL. The moment the page loads, a crypto wallet drainer activates in...
Scam radar
The continuous press review of online scams: new alerts, data and patterns updated every day from official sources (FBI, Europol, NCSC, Postal Police, FTC...). The same sources used by banks, insurers and law enforcement.
A fake site disguised as a GTA 6 fan countdown page is offering a "leaked copy" of the game for $50 or about 1 SOL. The moment the page loads, a crypto wallet drainer activates in...
Malwarebytes research shows that scammers no longer blast the same message everywhere. Instead, they match each scam type to the platform where it works best: toll scams arrive by...
Scammers are sticking their own QR code stickers over legitimate ones on parking meters, hoping drivers in a hurry will scan and pay. Instead of a real parking payment page, the...
Researchers at Bitsight discovered that popular low-cost TV streaming sticks, notably the H96 brand, secretly engage in large-scale ad fraud while parasitizing their owners' home...
Tech support scammers impersonate trusted security companies and convince victims their device has a problem, then demand payment, personal information, or remote access. Modern...
Scammers are cloning real car dealership websites to lure buyers into placing orders and sending payments for vehicles that do not exist. Victims arrive at the dealership...
Threat actors are running a phishing campaign that abuses the legitimate Faronics Deploy endpoint-management platform to enroll victim computers and push ConnectWise...
Researchers at the SANS Internet Storm Center analyzed a phishing email whose link pointed to a credential-harvesting page built with heavily obfuscated JavaScript. The page was...
The Postal Police is raising the alarm over a new wave of WhatsApp account compromises through "zero-click" attacks on unpatched iOS. Without the victim clicking anything,...
OAuth consent phishing is a sophisticated scam where attackers send direct messages impersonating government officials, media figures, or event coordinators, then trick victims...
Microsoft Threat Intelligence has documented a new variant of the ClickFix social-engineering technique dubbed TerminalFix . Attackers compromise legitimate websites and display a...
AI has turned open-source intelligence (OSINT) into an end-to-end fraud pipeline. Scammers can now automatically scrape your public social media posts, photos, videos, workplace,...
ToxicPanda 2.0 is a new Android banking trojan that turns infected phones into remote fraud tools. Attackers trick victims into sideloading a malicious app, often delivered...
Fake listings on popular platforms (marketplaces, media sites, social media) impersonate well-known security brands like Malwarebytes, McAfee, and Norton to funnel victims into...
Job seekers on Indeed are being targeted by scammers posing as recruiters who instruct victims to install a fake "interview" Android app. The malicious APK impersonates the Indeed...
Millions of people experience fraud every year but never report it — and scammers count on that silence. Sharing what happened with the FTC and your circle turns a personal loss...
iPhone users are being hit by a tech support scam that imitates an Apple Pay transaction to scare victims into calling a fake support line. A browser page shows a $657...
Scammers exploit every major weather emergency or natural disaster — hurricanes, floods in Nepal and Tibet, earthquakes in Venezuela, Japan, and Colombia — to set up fake...
Cybercriminals are exploiting the GTA 6 hype by creating fake Rockstar Games websites that appear in Google search results for "GTA 6 demo" or "GTA 6 download." Clicking the "Play...
Security researchers have uncovered AnonyMousKIT , a phishing-as-a-service (PhaaS) platform that automates the theft of iPhone unlock passcodes using AI-generated voice agents ....
Attackers are uploading malicious HTML files to public npm package mirrors, then sharing links that look like innocent Cloudflare CAPTCHA verification pages. Once the visitor...
The Postal Police reports a widespread scam on WhatsApp: criminals steal or compromise the accounts of known contacts and, posing as friends or family members in the address book,...
Scammers are flooding inboxes and DMs with messages that imitate TikTok, pushing users to click links to fake login or "verification" pages. The lure is usually urgency (account...
Scammers increasingly pressure Android users into sideloading malicious APK files by impersonating trusted brands such as banks, delivery services, government agencies, crypto...
A wave of fake websites impersonating Microsoft run bogus security scans that claim Windows no longer supports third-party antivirus and urge victims to uninstall their...
Veterans across the U.S. are receiving postcards claiming they — or their spouse — may qualify for extra monthly veterans benefits through a so-called "Veterans Savings Program."...
A new malware family called SynkLoader is being delivered through fraudulent Microsoft Teams messages. Attackers impersonate colleagues or IT staff and send chats that contain...
Security researchers have identified a network of 41 websites that impersonate popular games and Windows software (Counter-Strike, Roblox, VLC, 7-Zip, Foxit PDF, VMware and more)....
Replying to a 'wrong number' text confirms your number is active and signals you're a polite, responsive person — exactly the profile scammers want. Large-scale operations use AI...
Brushing scams involve unsolicited packages sent to your address using your name. The sender — often a third-party seller on a major marketplace — uses the "verified buyer" status...
Quishing , or QR-code phishing, has surged as attackers exploit the fact that QR codes move victims from a protected corporate computer onto a personal phone with weaker security...
Cybercriminals are pushing a trojanized copy of the popular PC cleaner CCleaner through a convincing clone of the official download page (ccleanerwind[.]top). Once executed, the...
Scammers impersonate legitimate "AML" (anti-money laundering) wallet-screening services such as AMLBot. Victims are invited to "check" their crypto wallet for ties to crime, but...
A threat actor calling itself "Ransom Busters" is contacting ransomware victims before attacks become public, claiming it can decrypt files and delete stolen data for...
The Postal Police warn that in recent weeks there has been a sharp increase in reports of fraudulent payment requests sent through payment apps such as BANCOMAT Pay and similar...
Fraudsters are running TikTok-branded "rewards" websites that promise cash for daily check-ins, small tasks and referrals. Balances look huge but withdrawals never arrive — the...
Dishonest companies buy paid search ads to impersonate legitimate bill payment sites, so a quick search for "pay my [utility] bill" can land you on a look-alike page that funnels...
Swatting is a malicious hoax in which a caller falsely reports a shooting, bomb threat, hostage situation, or other emergency to trigger a large police or SWAT response at a...
Malwarebytes research shows that 70% of 18-22 year-olds have faced an AI-driven scam in the past year, well above the general population. AI now powers convincing extortion,...
The FBI is warning that criminals are hijacking social media and personal accounts to steal intimate images, then posting or selling them alongside victims' contact details on...
The continuous press review of online scams: new alerts, data and patterns updated every day from official sources (FBI, Europol, NCSC, Postal Police, FTC...). The same sources used by banks, insurers and law enforcement.