Researchers found a turnkey scam kit sold on a cybercrime forum that lets criminals quickly stand up a fake crypto “presale” website styled to look like Tesla. The site uses pressure tactics and a fake investment dashboard to trick people into either handing over their wallet recovery phrase or sending cryptocurrency directly to the scammer. An admin panel tracks victims and can inflate fake balances to encourage additional payments.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this pops up in your browser: “You’re eligible for the $TSLA presale, check with your X username.” Looks like a slick Tesla token sale. Behind that page is a $500 scam-in-a-box kit: fake Tesla branding, a countdown clock, a progress bar that climbs on its own, and a dashboard showing your “balance” shooting up to push you to send more crypto. Here’s the trap: a form pops up asking for your 12-word recovery phrase to “claim a bonus,” or a crypto address to join the sale. Those 12 words are the master key, whoever gets them can empty your wallet, then hit you again with a fake “extra network fee” message. If any site, Tesla-branded or not, asks for your 12-word phrase, stop right there and close the page. That phrase never gets typed into a website. Ever.
Scammers are setting up lookalike websites that copy TikTok Shop’s design, trust badges, and wording to trick people into thinking they’re shopping inside TikTok. The main risk is entering payment (and sometimes loan-application) details into a site that has no real connection to TikTok, leading to…
Zenity demonstrated real-world attack chains where hidden instructions in emails or content on X can hijack AI “agentic browsers” (ChatGPT Atlas and the Claude Chrome extension). In the demos, the AI agent can be steered to perform actions in the user’s already logged-in sessions, sending phishing…
Microsoft says a Russian-linked group is abusing hotel and conference Wi‑Fi “captive portals” to trick travelers into entering corporate credentials or installing malware. Victims see what looks like a normal Wi‑Fi login flow, but attackers manipulate DNS/website traffic to redirect them to fake…
Scammers are using fake webpages that appear in search results for “TikTok” plus adult terms, promising “exclusive” explicit videos. Instead of any real content, the pages push visitors into an ad/affiliate funnel that collects emails, payment cards for fake “age verification,” or tricks people…
Scammers are setting up fake Fortnite “rewards,” “locker value,” and “competition” websites that funnel players to a fake Epic Games login page. The sites trick people into signing in so attackers can steal Epic usernames and passwords, then take over accounts for resale, fraud, or further scams. A…
Criminal groups are stealing Meta Business Manager and Google Ads accounts using phishing that arrives through trusted platforms like Salesforce, Google Workspace mail-merge, and SharePoint links. The stolen accounts are valuable not just for the budget inside them, but because older accounts with…
