Scam Radar
Ransomware groups added data exfiltration to the encryption play around 2020 and never looked back. We track the active leak sites, the families targeting Swiss and EU SMBs, and the incident-response checklist Mythos runs against newly disclosed indicators.
Data breach notifications are flooding inboxes and mailboxes, with over 471 million victim notices sent in the first half of 2026 alone, yet only 24% reveal the attack vector. Worse, scammers now...
A dark web marketplace called Nexus is selling digital scans of more than 153 million US and Canadian drivers licenses, reportedly siphoned from a major identity verification company used by Fortune...
A text that contains only your name and a question mark is a deliberate hook used by scammers who buy breached contact lists. The goal is to make you reply "Who is this?" or "Wrong number" so they...
A US CEO running a ransomware remediation firm has been criminally charged with allegedly defrauding victims: prosecutors say he secretly paid the attackers for decryption keys, then billed clients...
Scammers are sending iMessage texts that include a fake Facebook Marketplace listing showing the recipient's own name as the seller. The personalized screenshot acts as a 'conversation lure',...
Cybercriminals are targeting Free Mobile customers in France with sophisticated phishing emails sent after the operator's October 2024 data breach. Messages copy the official branding and demand a...
The domain third-party.com, long used as a placeholder in developer documentation, now hosts a ClickFix attack that impersonates a Cloudflare security check to trick Windows users into running...
The FBI is alerting the public to a surge in scams where criminals impersonate US or foreign law enforcement and government officials to extort money and steal personal information. Between January...
Scammers are exploiting Meta's automated copyright complaint system to suspend Instagram accounts at will and then extort victims for cryptocurrency ransoms to restore them. Repeated fraudulent...
Scammers are sending fake Revolut security texts that appear in the same SMS thread as legitimate bank messages, often just days after a data disclosure. Victims are directed to a phishing page that...
Hackers compromised the official HBO Max Reddit account and used it to run malicious ads that triggered ClickFix social-engineering attacks. ClickFix lures victims into copying and pasting a command...
A new malware family called SynkLoader is being delivered through fraudulent Microsoft Teams messages. Attackers impersonate colleagues or IT staff and send chats that contain links or attachments...
A threat actor calling itself "Ransom Busters" is contacting ransomware victims before attacks become public, claiming it can decrypt files and delete stolen data for $20,000-$60,000. Researchers at...
Steam hardware buyers across Europe are being warned: a cyberattack on logistics provider CEVA Logistics exposed names, home addresses, phone numbers, and order details for anyone who received a...
The NCSC Switzerland warns of a sharp rise in compromised legitimate websites (over 100,000 globally) that display fake CAPTCHA verification pop-ups. Instead of a normal "I am not a robot" check,...
Cybercriminals linked to the BlackFile extortion group are calling employees on their personal mobile phones, spoofing the corporate IT helpdesk, and asking them to enroll in passkeys or update...
Attackers are calling employees directly through Microsoft Teams, pretending to be internal IT support, to trick victims into granting remote access. Once inside, they deploy Chaos ransomware,...
Fast-food chain Chick-fil-A has confirmed that 13,322 customers had personal data stolen during credential stuffing attacks against its Chick-fil-A One loyalty platform between June 17 and 19, 2026....
Open Mythos and paste it. Free triage in seconds. Court-grade forensic dossier from CHF 29/month when you need a defensible trail.