Deceptive download sites fake the hover, redirect the click
Security researchers have identified a network of 41 websites that impersonate popular games and Windows software (Counter-Strike, Roblox, VLC, 7-Zip, Foxit PDF, VMware and more)....
Scam radar
The continuous press review of online scams: new alerts, data and patterns updated every day from official sources (FBI, Europol, NCSC, Postal Police, FTC...). The same sources used by banks, insurers and law enforcement.
Security researchers have identified a network of 41 websites that impersonate popular games and Windows software (Counter-Strike, Roblox, VLC, 7-Zip, Foxit PDF, VMware and more)....
Replying to a 'wrong number' text confirms your number is active and signals you're a polite, responsive person — exactly the profile scammers want. Large-scale operations use AI...
Brushing scams involve unsolicited packages sent to your address using your name. The sender — often a third-party seller on a major marketplace — uses the "verified buyer" status...
Quishing , or QR-code phishing, has surged as attackers exploit the fact that QR codes move victims from a protected corporate computer onto a personal phone with weaker security...
Cybercriminals are pushing a trojanized copy of the popular PC cleaner CCleaner through a convincing clone of the official download page (ccleanerwind[.]top). Once executed, the...
Scammers impersonate legitimate "AML" (anti-money laundering) wallet-screening services such as AMLBot. Victims are invited to "check" their crypto wallet for ties to crime, but...
A threat actor calling itself "Ransom Busters" is contacting ransomware victims before attacks become public, claiming it can decrypt files and delete stolen data for...
The Postal Police warn that in recent weeks there has been a sharp increase in reports of fraudulent payment requests sent through payment apps such as BANCOMAT Pay and similar...
Fraudsters are running TikTok-branded "rewards" websites that promise cash for daily check-ins, small tasks and referrals. Balances look huge but withdrawals never arrive — the...
Dishonest companies buy paid search ads to impersonate legitimate bill payment sites, so a quick search for "pay my [utility] bill" can land you on a look-alike page that funnels...
Swatting is a malicious hoax in which a caller falsely reports a shooting, bomb threat, hostage situation, or other emergency to trigger a large police or SWAT response at a...
Malwarebytes research shows that 70% of 18-22 year-olds have faced an AI-driven scam in the past year, well above the general population. AI now powers convincing extortion,...
The FBI is warning that criminals are hijacking social media and personal accounts to steal intimate images, then posting or selling them alongside victims' contact details on...
If you owe back taxes, dishonest debt-relief companies may promise unrealistic results, such as wiping out your debt for "pennies on the dollar," before even reviewing your...
The FBI is alerting the public that sexual exploitation actors are targeting adult and underage victims by illegally accessing social media and personal accounts to steal and...
...
Attackers are cloning the homepages of trusted brands like CNN, Avast, and Stremio to push a "free app" that is actually O&O Syspectr, a legitimate remote-administration tool...
Over 737 malicious Chrome extensions impersonated well-known VPN and proxy services on the Chrome Web Store. Once installed, they routed users' browsing traffic through SOCKS5...
The Italian Postal Police has issued a warning against a widespread online scam: emails that impersonate official communications from the Police Forces, featuring fake logos,...
Steam hardware buyers across Europe are being warned: a cyberattack on logistics provider CEVA Logistics exposed names, home addresses, phone numbers, and order details for anyone...
The Canadian Anti-Fraud Centre (CAFC) publishes a browseable index of frauds affecting individuals and organizations, organized alphabetically, by delivery medium, by business...
A new ready-made kit sold for just $500 lets low-skill operators launch convincing crypto presale scams on X (formerly Twitter). The package impersonates the Tesla brand and...
Scammers are cloning TikTok Shop's look, trust badges, and category layout into standalone websites that have no real connection to TikTok. Users who land on these sites through...
Phishers are increasingly hosting fake login pages on trusted cloud platforms such as Cloudflare Workers, Vercel, Netlify, GitHub Pages and IPFS to steal credentials and bypass...
A smishing campaign is circulating that improperly uses the name of the State Police, the Highway Police, or other public bodies to deceive citizens. The SMS notifies of a...
NCSC Switzerland's four-part summer series highlighted how today's AI models can produce highly convincing fake images, and how scammers are already weaponising them for fraud,...
Full-screen browser popups are claiming that your Apple ID or Amazon account just made a $149.99 "pre-authorization" purchase and urging you to call a phone number immediately....
Social media platforms do not always thoroughly vet the ads shown in your feed or the advertisers behind them. A polished post promising a designer bag at 50% off or a...
The NCSC Switzerland warns of a sharp rise in compromised legitimate websites (over 100,000 globally) that display fake CAPTCHA verification pop-ups. Instead of a normal "I am not...
A new malware campaign combines the ClickFix and EtherHiding techniques to target business and consumer users. After compromising legitimate websites, attackers inject obfuscated...
Social media feeds are flooded with so-called "gurus" flashing luxury cars and exotic vacations, promising you can get rich by learning to trade. They sell expensive courses,...
Microsoft Threat Intelligence has tracked a macOS ClickFix campaign that tricks users into copying and running a malicious command in Terminal, ultimately installing infostealers...
A new WhatsApp scam tricks victims into giving attackers access to their accounts by posing as a friend asking for a vote online. The message—often sent from an...
Scammers are impersonating OnlyFans creators using AI-generated deepfake videos and cloned voices to catfish fans on TikTok, Snapchat and similar platforms. They lure victims into...
Bots are sliding into League of Legends players through the Riot client immediately after matches, using flirty AI-generated chat to build trust before steering victims toward...
The FTC encourages parents to use the back-to-school season as a moment to discuss financial wellness with teens. Identity theft targeting young people is rising, especially...
Cybercriminals linked to the BlackFile extortion group are calling employees on their personal mobile phones, spoofing the corporate IT helpdesk, and asking them to enroll in...
CSIRT Italia has detected a smishing campaign impersonating the GLS courier to steal payment card data. The victim receives an SMS reporting a suspended delivery due to missing...
The Greatness phishing-as-a-service platform has added adversary-in-the-middle (AiTM) and device-code phishing flows to steal Microsoft 365 logins. Attackers send emails that...
...
The continuous press review of online scams: new alerts, data and patterns updated every day from official sources (FBI, Europol, NCSC, Postal Police, FTC...). The same sources used by banks, insurers and law enforcement.