A foreign investor signed transaction documents for a €10M land purchase after being told one document would “protect the company.” The document instead granted broad power of attorney and sale-like authority, and the investor discovered the issue only 18 months later when the local lawyer stopped responding. The case highlights how over-reliance on a single adviser and lack of independent review can quietly transfer control.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine a €10 million deal… and one extra document you’re told will “protect the company.” In this real case, that “protective” paper actually functioned as a power of attorney plus sale authorization, giving someone else legal power to act, even sell, on the investor’s behalf. Here’s the scary part: the entire €10M investment relied almost entirely on one local adviser. No independent legal review, no second adviser copied on the signed set, and for eighteen months, no one noticed how much control had been handed away. Your move: if any document grants power of attorney, signing authority, or sale authorization, pause and send it for truly independent review, someone whose only job is to protect your side.
Interpol's Serengeti III operation led to 1,462 arrests across Africa and the recovery of more than $105 million linked to cybercrime. In Uganda, fraud rings used call-center scripts, fake trading platforms, and fraudulent websites to persuade pensioners in Asia to invest in fictional…
This weekly recap describes a task scam in which victims were paid to create fake sales and reviews, then told they had a “negative balance” and needed to deposit their own money to receive payment. One fraudster reportedly lost more than $4.8 million after proceeds from this scam were placed into…
A reported case involved a Virginia woman receiving hundreds of automated sign-up emails in a day. The flood was used to hide a legitimate bank alert about a fraudulent laptop purchase, showing how inbox overload can conceal account fraud or unauthorized transactions.
Scammers convinced DYORSWAP to integrate a fake version of the upcoming GIWA blockchain, making it look legitimate to users. More than 1,300 wallets then sent roughly 767 ETH (about $2M) to a spoofed bridge contract, which was quickly drained and routed through Tornado Cash.
The article describes a common fraud pattern where scammers impersonate police, government officials, or other trusted authorities over the phone to pressure victims into paying via a Bitcoin/crypto ATM. The victim is told their money is at risk, instructed to withdraw cash, and then directed to…
The article describes multiple real-world social engineering operations this week, including phishing sent from a legitimate Trezor newsletter channel and malware pushed through a verified HBO Max Reddit ad account. It also highlights a large-scale network of fake online stores impersonating real…
