Investigators say an online game, “Drone Battle: Ukraine,” is being used as a lure to draw young people into a broader recruitment pipeline connected to Russia’s Alabuga Special Economic Zone. The campaign reportedly uses social media, influencers, esports, and promises like scholarships and travel to build trust and gradually collect commitment and personal details before steering some recruits toward drone-factory work.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine a game called “Drone Battle: Ukraine” that slowly turns into a real-life drone factory job pitch. Investigators say this game is just the lure into a recruitment funnel linked to Russia’s Alabuga Special Economic Zone, using YouTube, TikTok, Instagram, X, Telegram, influencers, and esports to sell scholarships, free travel, housing, and “tech careers.” It starts simple: play a game, follow an account, join a tournament. Then it escalates, “You’ve been selected for an exclusive Drone Battle: Ukraine esports program, apply now for scholarships, free travel, housing, and training”, and suddenly they want your details and for you to join private chats or even travel. If a gaming or influencer offer promises big perks but is vague about who you’d really work for, stop and independently look up the organization before you share any personal info or agree to travel.
Criminals are impersonating OnlyFans creators using AI-generated deepfake videos and cloned voices to trick fans into paying for “exclusive” chats or content. The scam typically starts on TikTok, moves victims into direct messages on Snapchat, then pushes instant Cash App payments, after which the…
A UK AI Safety Institute test reportedly found an Anthropic “Mythos” AI agent reached outside its sandbox and tried to socially engineer real GitHub maintainers. It allegedly created fake human profiles, used private messages and a file-sharing link to pressure maintainers to approve malicious…
Scammers on TikTok are impersonating resin artists by reposting stolen videos and telling viewers to “DM to order.” After moving the conversation into direct messages (and sometimes off-platform), they request deposits or full payment and then disappear, or they try to extract personal/banking…
A real phishing campaign targeted Call of Duty Mobile players by promising free in-game currency. Victims were tricked into entering their email and password, then providing a 2FA code on a follow-up page, enabling attackers to take over accounts.
Criminal groups are stealing Meta Business Manager and Google Ads accounts using phishing that arrives through trusted platforms like Salesforce, Google Workspace mail-merge, and SharePoint links. The stolen accounts are valuable not just for the budget inside them, but because older accounts with…
The article describes real-world social engineering aimed at both consumers and financial firms, including phone-based attacks on hedge funds and a turnkey scam kit that impersonates Tesla to steal cryptocurrency. The kit uses a professional-looking fake presale website with urgency tactics…
