In a Queue for a Scam

Group-IB identified 500+ fraudulent websites exploiting iPhone X demand, including fake preorder stores advertising ~30% discounts and “giveaway” redirect chains that collect personal data and sometimes deliver malware. The operators request bank transfers/e-wallet payments and proof-of-transfer screenshots, fake ratings to boost credibility, and have interlinked at least 11 sites with ~6,000 monthly visitors each—potentially netting ~$68,000/month per site and an aggregate potential damage of $34M. Victim PII and payment data may surface on the Dark Web and facilitate targeted attacks, and the volume of scams is expected to increase around official sales; well-known brands across multiple industries are commonly abused in these schemes.