logo

Active Subscription Scam Campaigns Flooding the Internet

ID: 61c0eb00-5234-515e-9e24-77308c3673d3

STIX ID: report--61c0eb00-5234-515e-9e24-77308c3673d3

Feed Name: Bitdefender Labs

Threat Score
50/100

Date Published: 2025-04-30

Date Updated: 2026-04-27

Author: Răzvan GOSA

...
...

Bitdefender researchers uncovered a large, active subscription/mystery-box scam campaign that operates via paid social ads and hundreds of professionally made fraudulent storefronts to steal credit card and personal data and enroll victims into hidden recurring subscriptions; the report includes a list of over 200 domains/IPs, describes evasion techniques (impersonation, ad variants, image-only ads, homoglyphs), and notes a recurring Cyprus-linked address that appears across many sites.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.