Phishing scams: latest cases and how to recognize them
Phishing remains the most common entry point for fraud across Europe. This page tracks recent confirmed cases reported by national CSIRTs and law-enforcement agencies, plus the patterns Mythos has identified in user-submitted messages.
A fake site disguised as a GTA 6 fan countdown page is offering a "leaked copy" of the game for $50 or about 1 SOL. The moment the page loads, a crypto wallet drainer activates in the background....
Malwarebytes research shows that scammers no longer blast the same message everywhere. Instead, they match each scam type to the platform where it works best: toll scams arrive by email or SMS,...
Scammers are sticking their own QR code stickers over legitimate ones on parking meters, hoping drivers in a hurry will scan and pay. Instead of a real parking payment page, the fake QR code leads to...
Threat actors are running a phishing campaign that abuses the legitimate Faronics Deploy endpoint-management platform to enroll victim computers and push ConnectWise ScreenConnect, giving them...
Researchers at the SANS Internet Storm Center analyzed a phishing email whose link pointed to a credential-harvesting page built with heavily obfuscated JavaScript. The page was "polymorphic": each...
AI has turned open-source intelligence (OSINT) into an end-to-end fraud pipeline. Scammers can now automatically scrape your public social media posts, photos, videos, workplace, family ties and...
Job seekers on Indeed are being targeted by scammers posing as recruiters who instruct victims to install a fake "interview" Android app. The malicious APK impersonates the Indeed login page, then...
Scammers exploit every major weather emergency or natural disaster — hurricanes, floods in Nepal and Tibet, earthquakes in Venezuela, Japan, and Colombia — to set up fake charities and pocket money...
Cybercriminals are exploiting the GTA 6 hype by creating fake Rockstar Games websites that appear in Google search results for "GTA 6 demo" or "GTA 6 download." Clicking the "Play Now" or "Official...
Security researchers have uncovered AnonyMousKIT , a phishing-as-a-service (PhaaS) platform that automates the theft of iPhone unlock passcodes using AI-generated voice agents . The service targets...
Attackers are uploading malicious HTML files to public npm package mirrors, then sharing links that look like innocent Cloudflare CAPTCHA verification pages. Once the visitor clicks, the fake CAPTCHA...
Scammers are flooding inboxes and DMs with messages that imitate TikTok, pushing users to click links to fake login or "verification" pages. The lure is usually urgency (account suspended, copyright...
Scammers increasingly pressure Android users into sideloading malicious APK files by impersonating trusted brands such as banks, delivery services, government agencies, crypto platforms or job...
Veterans across the U.S. are receiving postcards claiming they — or their spouse — may qualify for extra monthly veterans benefits through a so-called "Veterans Savings Program." That program does...
A new malware family called SynkLoader is being delivered through fraudulent Microsoft Teams messages. Attackers impersonate colleagues or IT staff and send chats that contain links or attachments...
Replying to a 'wrong number' text confirms your number is active and signals you're a polite, responsive person — exactly the profile scammers want. Large-scale operations use AI to hold thousands of...
Quishing , or QR-code phishing, has surged as attackers exploit the fact that QR codes move victims from a protected corporate computer onto a personal phone with weaker security controls. A...
Scammers impersonate legitimate "AML" (anti-money laundering) wallet-screening services such as AMLBot. Victims are invited to "check" their crypto wallet for ties to crime, but the site tricks them...