Make a deal with Netcraft
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Known for
4 views
Netcraft has identified a scam campaign exploiting public interest in the #SpaceX IPO. Fake investment portals impersonate SpaceX, Elon Musk, and brokerages, directing visitors through tax forms and investment tier selection before requesting cryptocurrency deposits (BTC/ETH/USDT).
One #BTC wallet linked to the campaign has received ~0.14 BTC (~$8,700) at time of writing. Domain infrastructure inc
1 views
Observed in the wild: A phishing page that requests getUserMedia() permissions under the guise of a Visa Secure payment check, then silently captures frames from the front-facing camera every 2 seconds and POSTs them to a Telegram bot via hardcoded bot token in client-side JS.
A second variant records 20 stills + 10 short video clips before exfil. The Telegram credentials are exposed in the page
📊 Post engagement
🔥 Top post: Netcraft has identified a scam campaign exploiting public intere · 4 likes + reposts
📊 Activity & format
Recent posts
View on Mastodon ↗
🔥 Top post
Netcraft has identified a scam campaign exploiting public interest in the #SpaceX IPO. Fake investment portals impersonate SpaceX, Elon Musk, and brokerages, directing visitors through tax forms and investment tier selection before requesting cryptocurrency deposits (BTC/ETH/USD…
Kelly Bissell (former CVP, Fraud & Abuse, Microsoft) pushes back on headline-driven threat prioritization: nation-state attribution generates press coverage, but fraud is what actually costs organizations money.
Full discussion in IWG Rewi…
Australia's Scams Prevention Framework imposes a "reasonable steps" standard on banks with no defined checklist — no mandated tooling, no regulator-endorsed channel priority. Compliance is assessed against what a well-resourced institution…
Netcraft has shipped a UI redesign for its threat detection and takedown platform. Detection engine, evidence chain, and takedown pipeline are unchanged — this is an interface-layer update.
Changes: consolidated triage queues, persistent g…
Fragmented brand protection monitoring creates blind spots: threat actors reuse domains, hosting, phone numbers, and accounts across channels, so takedowns on one surface don't stop the campaign elsewhere.
Our new post covers why channel-…
Brand impersonation is being used at scale for casino affiliate fraud.
Ads on #Meta/#TikTok claim a well-known brand "launched" a slots product. The landing page mimics an app store listing. Tapping "Install" registers a Progressive Web Ap…
How financial institutions should be preparing for the upcoming new #Scams Prevention Framework in #Australia https://www.netcraft.com/blog/australia-scams-prevention-framework-what-the-new-obligations-mean-for-banks
Browser-in-the-Middle phishing has evolved. Bluekit uses a session replay library (rrweb) to stream a live, interactive login page from the attacker's browser to the victim's. It looks and behaves exactly like the real thing — because it i…
RE: https://infosec.exchange/@BleepingComputer/116811341383412305
New breaking research from us 👇
And you can read more here https://www.netcraft.com/blog/bluekit-phishing-as-a-service-threat
Observed in the wild: A phishing page that requests getUserMedia() permissions under the guise of a Visa Secure payment check, then silently captures frames from the front-facing camera every 2 seconds and POSTs them to a Telegram bot via …
EvilTokens abuses OAuth device code flow to phish credentials without ever rendering a fake login page.
The victim authenticates through a legitimate Microsoft prompt. The attacker gets the token. No credential harvest, no spoofed UI — ju…
RE: https://infosec.exchange/@BleepingComputer/115663627288221100
Proud to support NCSC’s proactive notifications pilot. External scanning helps surface exposed services and known vulnerabilities so organizations can remediate faster. Impo…
🐘 Community & instance
💡 Facts
🛡️ Audience credibility
- Est. 92% real, active audience · Low fake-follower risk.
- Strong engagement (~0.2× of followers engage each post) — an active, real audience.
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →✉ Message Netcraft
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Netcraft
Booking an event / appearance is a Pro feature. Upgrade to book Netcraft for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Netcraft gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.