Researchers found a turnkey scam kit sold on a cybercrime forum that lets criminals quickly stand up a fake crypto “presale” website styled to look like Tesla. The site uses pressure tactics and a fake investment dashboard to trick people into either handing over their wallet recovery phrase or sending cryptocurrency directly to the scammer. An admin panel tracks victims and can inflate fake balances to encourage additional payments.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this pops up in your browser: “You’re eligible for the $TSLA presale, check with your X username.” Looks like a slick Tesla token sale. Behind that page is a $500 scam-in-a-box kit: fake Tesla branding, a countdown clock, a progress bar that climbs on its own, and a dashboard showing your “balance” shooting up to push you to send more crypto. Here’s the trap: a form pops up asking for your 12-word recovery phrase to “claim a bonus,” or a crypto address to join the sale. Those 12 words are the master key, whoever gets them can empty your wallet, then hit you again with a fake “extra network fee” message. If any site, Tesla-branded or not, asks for your 12-word phrase, stop right there and close the page. That phrase never gets typed into a website. Ever.
This article describes real election-themed scams that use fake voter-support messages, political donation appeals, survey prizes, official-looking penalty notices, and bogus campaign merchandise. The scams pressure voters to click fraudulent links, share personal or payment information, download…
Criminals abused an unnamed spend-management platform’s open-banking connection feature to test stolen bank logins and identify accounts with available funds. They also used the platform’s legitimate notification system to send fake Poshmark sale alerts, directing victims to counterfeit pages that…
Microsoft and partners disrupted a Chinese-language phishing kit ecosystem (tracked as Storm-2990) used to send over 1 billion malicious email and SMS messages to more than 75,000 organizations worldwide. The kits used common “urgent alert” scams (delivery issues, unpaid tolls, bank or tax…
Researchers found dozens of lookalike websites impersonating real crypto projects and promising a small, believable reward boost if users “vote” on a rewards distribution date. The vote is fake; clicking “Vote now” triggers a wallet connection prompt and can lead to malicious approval/signature…
This bulletin describes multiple real-world scams where attackers make fake pages and messages look like routine, trusted experiences (search answers, Google login pop-ups, “giveaways,” and official-sounding calls). Examples include a fake Claude Max giveaway using a convincing fake Google sign-in…
Following a Revolut data breach, scammers sent text messages that appeared to come from the same message thread as legitimate Revolut texts. The texts pushed victims to click a link for a fake identity “liveness check,” request camera access, and then capture passwords, information that could be…
