Scam Radar
A SIM swap takes minutes — a corrupted carrier rep or a social-engineered support call — and the attacker now receives every SMS OTP for your bank, email and crypto exchange. We track the regions where SIM-swap fraud spiked in 2024-2025 and the SS7-level signatures involved.
Email bombing (also called form, list, or subscription bombing) is a fraud tactic where attackers flood your inbox with hundreds of sign-up confirmation emails from legitimate services. The goal is...
Job seekers are being targeted by fake Calendly booking pages that impersonate Meta (Facebook) recruiters. The pages copy a real Calendly scheduling flow, then push victims through forged Facebook...
Domino's Pizza customers have been notified that their accounts were accessed by criminals using email/password combinations stolen in unrelated breaches and reused on the Domino's login page. This...
AI-powered phishing kit BlueKit lets criminals hijack accounts in minutes Researchers at Malwarebytes uncovered BlueKit , a phishing-as-a-service (PhaaS) toolkit sold on Russian-language cybercrime...
Attackers are sending bulk unsolicited password-reset emails to X users, timing the wave to coincide with the wider rollout of X Money payments. Even though X says no accounts have been compromised,...
OAuth consent phishing is a sophisticated scam where attackers send direct messages impersonating government officials, media figures, or event coordinators, then trick victims into granting app...
The FBI is warning that criminals are hijacking social media and personal accounts to steal intimate images, then posting or selling them alongside victims' contact details on criminal marketplaces....
The FBI is alerting the public that sexual exploitation actors are targeting adult and underage victims by illegally accessing social media and personal accounts to steal and distribute explicit...
A new WhatsApp scam tricks victims into giving attackers access to their accounts by posing as a friend asking for a vote online. The message—often sent from an already-compromised contact—links to a...
Fast-food chain Chick-fil-A has disclosed a credential stuffing attack that hijacked customer loyalty accounts between June 17-19, 2026. Attackers used usernames and passwords leaked from other...
Attackers are using a clever phishing trick that abuses Microsoft’s own legitimate login page (microsoft.com/devicelogin). Instead of sending you to a fake site, they trick you into visiting the real...
Email accounts are a top target because they control password resets for nearly every other online service you use. With a single compromised inbox, attackers can intercept banking codes, impersonate...
The false report scam is a pure social engineering attack targeting Reddit and Discord users. A stranger claims someone reported your account (or that they accidentally reported you), then sends a...
A new active malware campaign is spreading through WhatsApp Web and Desktop, using hijacked user accounts to send malicious VBScript (.vbs) files to contact lists worldwide. Victims receive a message...
Meta's AI-powered support chatbot was tricked by attackers into changing the email addresses on Instagram accounts, effectively handing over account control. The bot failed to verify the true owner's...
Scammers are sending fake "You're invited" texts and emails tied to graduation and summer party season. The message pressures you to enter your email address and password (or a one-time passcode) to...
Hackers are exploiting Meta's new AI customer-support chatbot to hijack Instagram accounts, including high-profile handles like the Obama White House and a US Space Force chief. The trick: an...
Attacker phishes long-established eBay or Amazon seller credentials; listings change to high-value items (PS5, iPhone, GPUs) at low prices; payment routed off-platform ('PayPal Friends & Family for...
Open Mythos and paste it. Free triage in seconds. Court-grade forensic dossier from CHF 29/month when you need a defensible trail.