A Reddit user reports being asked to verify they're not an AI agent through scanslop.com, which directs them to an external site with a URL containing their comment ID. The user expresses concern that this allows scanslop.com to associate Reddit usernames with IP addresses.
A new phishing-as-a-service called Starkiller uses disguised links to load real login pages from target brands. It acts as a relay between victims and legitimate sites, forwarding usernames, passwords, and MFA codes to bypass security measures.
An investigation uncovered a large network of fake support groups on Telegram that spread cryptocurrency stealers and drainers. The network was found to be actively promoting malicious tools designed to drain crypto wallets.