Police disrupted an international investment-fraud operation that used deceptive online advertisements to draw victims into fake investment websites. Criminal call-center staff then posed as brokers, showed victims fake account gains, and delayed withdrawal requests until they stopped communicating. Investigators estimate losses exceeded €4 million.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
“Huge gains with no downside”? That’s the bait. Click the ad, enter your details, and a supposed broker calls. They steer you to a fake investment site and ask for your money. The dashboard shows profits, so you deposit more. Here’s the catch: those gains are just numbers on their screen. Try withdrawing, and the excuses start. Before sharing details or sending money, check the firm in your financial regulator’s official register.
INTERPOL’s Operation Serengeti III led to 1,462 arrests across 21 countries and disrupted fraud, ransomware, business email compromise and other cybercrime operations. One major case involved rotating call centers that used scripted investment pitches, fake trading platforms and fraudulent websites…
The newsletter reports that Binance attributed a record-setting $6.43 billion theft to a sophisticated, multi-stage campaign. Attackers reportedly used recruitment-themed social engineering against two engineers and a tampered Homebrew installation, showing how a convincing job-interview pretext…
Attackers linked to North Korea allegedly used a fake recruitment process to persuade a Binance software engineer to download a malicious coding assignment onto a work computer. They then used the compromised device, internal AI tooling, and stolen deployment credentials to reach wallet-signing…
A scammer allegedly used Amanda Smith’s personal information to open a Cash App account and receive $1,000 from a buyer tricked by a fraudulent Facebook Marketplace listing. The case shows how an account takeover, fake sale, and identity theft can leave both the buyer and the person whose identity…
North Korean operatives reportedly posed as remote IT workers, used stolen identities, passed hiring checks, and gained legitimate access inside hundreds of Western companies. The article also describes attackers using autonomous AI agents inside a victim’s cloud environment to harvest credentials…
A Ukrainian corruption investigation uncovered a network accused of paying officials to protect fraudulent call centers. The centers allegedly targeted victims in Ukraine and abroad by posing as bank employees, law enforcement officers, or financial advisers, and by directing people to fake…
