Fake CNN and BBC sites used to push investment scams | The Record from Recorded Future News

That campaign, which has been active for months, involves thousands of phishing websites that mimic the design and product listings of well-known retailers — including Apple, PayPal, Nordstrom, Hermès, and Michael Kors — to trick users into entering their credit card information. Researchers at Bahrain-based cybersecurity firm CTM360 said they identified more than 17,000 such sites, which publish fake stories featuring prominent public figures, including national leaders and central bank governors. Earlier in July, researchers uncovered a sprawling network of fraudulent retail websites impersonating major global brands in an effort to steal payment data from online shoppers. Clicking these articles leads to fraudulent investment platforms — often branded as Eclipse Earn, Solara or Vynex — that promise high returns through automated crypto trading, the researchers said. These platforms are professionally designed to appear legitimate, featuring fake dashboards, manipulated profit data and fabricated testimonials, CTM360 said. While it is unclear how much money the criminals have stolen, researchers noted that the personal and financial data collected is often resold on the dark web or reused in future phishing and fraud campaigns. The scam spans more than 50 countries, with websites tailored to local audiences by using native languages, regional celebrities and well-known financial institutions to appear credible, CTM360 said. Cybercriminals are faking popular news websites such as CNN, BBC and CNBC to trick people into investing in fraudulent cryptocurrency schemes, according to a new report. The articles falsely linked those figures to “fabricated investment schemes in order to build trust and get engagement from victims,” the researchers said. When users attempt to withdraw their supposed earnings, they encounter a series of delays and obstacles, including demands for additional fees, new minimum balance requirements, or extended verification procedures. The scheme typically begins with ads placed on platforms like Google and Meta, which redirect users to bogus news articles.

This Cyber News was published on therecord.media. Publication date: Wed, 09 Jul 2025 13:40:14 +0000


Cyber News related to Fake CNN and BBC sites used to push investment scams | The Record from Recorded Future News

Threat Actors Mimic CNN, BBC, and CNBC Websites to Promote Investment Scams - Cybersecurity researchers have identified a sophisticated international fraud campaign that leverages impersonated news websites from major outlets including CNN, BBC, CNBC, News24, and ABC News to orchestrate large-scale investment scams. The ...
15 hours ago Cybersecuritynews.com
Unravelling Retirement Banking Scams and How To Protect Yourself - In the labyrinth of financial scams, one of the most insidious is the retirement banking scam. According to the FBI, in 2020 alone, financial scams targeting seniors netted more than $1 billion. It's a quiet crisis that we need to address, and ...
1 year ago Hackread.com
Fake CNN and BBC sites used to push investment scams | The Record from Recorded Future News - That campaign, which has been active for months, involves thousands of phishing websites that mimic the design and product listings of well-known retailers — including Apple, PayPal, Nordstrom, Hermès, and Michael Kors — to trick users into ...
6 days ago Therecord.media
Investment Scams Grow, 13,000 Domains Detected in January 2024 - Internet security experts have detected and blocked nearly 13,000 fake investment platform domains across more than 7000 IPs in January 2024, a 25% increase from December 2023. The figure comes amid growing concerns over the escalating threat of ...
1 year ago Infosecurity-magazine.com
Best of 2023: Why is everyone getting hacked on Facebook? - Importantly, phishing relies on the victim trusting the scammer and taking an action - like clicking a link or sending bank account information - in order for the scammer to get what they want. It's not your imagination - social media scams really ...
1 year ago Securityboulevard.com
How Criminals Are Leveraging AI to Create Convincing Scams - Cybercriminals create far more sophisticated scams with generative AI than traditional phishing scams. According to Visa research, scammers are fooling even the savviest internet users by launching pig butchering, inheritance, humanitarian relief ...
1 year ago Tripwire.com
Researchers Uncovered Threat Actors TTP Patterns & Role in DNS in Investment Scams - These sophisticated scams, which include the notorious “pig butchering” schemes, deploy various attack vectors ranging from generic text messages to targeted social media advertisements, often using fake cryptocurrency platforms to ...
2 months ago Cybersecuritynews.com
BaitTrap - 17,000+ Fake News Websites Caught Promoting Investment Frauds - Cyber Security News - These malicious platforms masquerade as legitimate news outlets, publishing fabricated stories featuring well-known public figures and respected financial institutions to build trust and lure unsuspecting victims into high-risk financial scams ...
2 hours ago Cybersecuritynews.com
AI-Powered Russian Network Pushes Fake Political News - Media organizations including Al-Jazeera, Fox News, the BBC, La Croix and TV5Monde are among those impacted. Sometimes legitimate sites are spoofed and hosted on alternative domains such as bbc-uk[. News, while on other occasions, stories are ...
1 year ago Infosecurity-magazine.com
Business Email Compromise Scams: Prevention and Response - We will also highlight red flags to watch out for in suspicious emails, emphasizing the importance of implementing robust email authentication methods and comprehensive employee training programs to enhance awareness and response capabilities. BEC ...
1 year ago Securityzap.com
Netgear, Hyundai latest X accounts hacked to push crypto drainers - The official Netgear and Hyundai MEA Twitter/X accounts are the latest hijacked to push scams designed to infect potential victims with cryptocurrency wallet drainer malware. While Hyundai has already regained access to their account and has cleaned ...
1 year ago Bleepingcomputer.com
China-linked hackers spoof big-name brand websites to steal shoppers' payment info | The Record from Recorded Future News - The campaign, which has been active for months, uses thousands of phishing websites that mimic the design and product listings of well-known retailers — including Apple, PayPal, Nordstrom, Hermes, and Michael Kors — to trick users into entering ...
1 week ago Therecord.media
BBC suffers data breach impacting current, former employees - The BBC has disclosed a data security incident that occurred on May 21, involving unauthorized access to files hosted on a cloud-based service, compromising the personal information of BBC Pension Scheme members. As per the reports, the incident ...
1 year ago Bleepingcomputer.com Ransomhub
US SEC's X account hacked to announce fake Bitcoin ETF approval - The X account for the U.S. Securities and Exchange Commission was hacked today to issue a fake announcement on the approval of Bitcoin ETFs on security exchanges. The announcement came this afternoon in a now-deleted tweet from the SEC's hacked X ...
1 year ago Bleepingcomputer.com
Police dismantles investment fraud ring stealing €10 million - “They persuaded their victims to make fake investments through a network of fake advisors and experts, manipulated websites, and telephone call centers,” the police says. In organized operations like the one dismantled by the Spanish ...
1 week ago Bleepingcomputer.com
Mandiant's X account hacked by crypto Drainer-as-a-Service gang - The threat actor who took over Mandiant's X social media account used it to share links, redirecting the company's over 123,000 followers to a phishing page to steal cryptocurrency. As Mandiant found during a follow-up investigation into the ...
1 year ago Bleepingcomputer.com
Romance Scammers are Adopting Approval Phishing Tactics - Romance scams are labor-intensive and time-consuming schemes to run. They can be lucrative, pulling in millions in stolen cryptocurrency, but they also can end up going nowhere if the targeted victim becomes suspicious or the bad actor decides there ...
1 year ago Securityboulevard.com Rocke
New Power Parasites Phishing Attack Targeting Energy Companies and Major Brands - A sophisticated phishing campaign dubbed “Power Parasites” has been actively targeting global energy giants and major brands since 2024, according to a comprehensive threat report released this week. The ongoing campaign primarily ...
2 months ago Cybersecuritynews.com
Cyber Crime Wave: Chinese Scammers Target Europe with Fake Designer Brands - In the last couple of weeks, there has been an increase in the number of people who have been duped into sharing their card details and other personal information with a network of fake online designer shops that are operated from China, which appear ...
1 year ago Cysecurity.news
'Sex life data' stolen from UK government among record number of ransomware attacks - Data on the sex lives of up to 10,000 people was stolen from a British government department in one of the record number of ransomware attacks to have hit Westminster in the first half of this year. It is not known which department the information ...
1 year ago Therecord.media
US moves to recover $2.3 million from "pig butchers" on Binance - Pig butchering is a social engineering scam where fraudsters contact people on social media and messaging platforms to build trust. They eventually trick the person depositing cryptocurrency into fake investment sites, where the victim is deceived ...
1 year ago Bleepingcomputer.com
TikTok Removes Russian Propaganda Networks - TikTok removes hundreds of thousands of fake accounts spreading Russian propaganda and seeking to weaken Western support for Ukraine. TikTok said it has removed hundreds of thousands of fake Russian-operated accounts that targeted users in Europe, ...
1 year ago Silicon.co.uk
New Subscription-Based Scams Attacking Users to Steal Credit Card Data - Most concerning is that many of these scam websites share similar design elements and registration information pointing to Cyprus, suggesting a coordinated campaign by organized cybercriminals specifically targeting users’ credit card data ...
2 months ago Cybersecuritynews.com
New Balada Injector campaign infects 6,700 WordPress sites - A little over 6,700 WordPress websites using a vulnerable version of the Popup Builder plugin have been infected with the Balada Injector malware in a campaign that launched in mid-December. Initially documented by researchers at Dr. Web who observed ...
1 year ago Bleepingcomputer.com CVE-2023-6000
Malware Takedowns Show Progress, But Fight Against Cybercrime Not Over - Takedown of malware infrastructure by law enforcement has proven to have an impact, albeit limited, on cybercriminal activity, according to threat intelligence provider Recorded Future. The Emotet takedown, led by Europol and Eurojust in 2021. The ...
1 year ago Infosecurity-magazine.com

Cyber Trends (last 7 days)