Fake Polymarket platforms claim nearly $11 million in crypto deposits
Insikt Group says three Russian-language teams sell fake Polymarket and Kalshi sites; the deposit totals are the operators’ unverified claims.
52
Organization
Insikt Group
- Mentions · 7d2
- Mentions · 30d10
- All mentions18
- First seenAug 13, 2026
- Last mentioned12h ago
Timeline
18 articles · newest firstTraffer teams sell fake prediction-market fraud kits
AtlasCore, PolyFucked, and Magnetic Team supply scam sites, panels, and crypto payouts; deposit totals are unverified.
58
Japan cyber incident reports rose 48% in Q3 2026
Insikt Group counted 918 reports, up from 621, alongside multi-million-record breaches and an IDCFrontier ransomware outage.
78
TAG-217’s South Korea bank operation exposed its own tools
Open directories showed crypto, Linux and mobile tooling; cited breaches cover at least 68,000 people.
72
TAG-217 used Claude, DeepSeek and Grok against South Korean banks
Cited reporting says at least 68,000 people's data was exposed at seven or more financial institutions.
73
Suspected Kazakhstan-linked hackers target governments across former Soviet states
Suspected Kazakhstan-linked UAT-6275 ran at least eight espionage campaigns against former Soviet governments since 2025.
76
Russia Is Tightening Internet Controls, Leading to Operational Risks
Insikt Group says Russia’s expanding VPN blocks, shutdowns, and surveillance raise operational and sanctions risks without full internet isolation.
64
TAG-217 Targets South Korean Financial Services with ARTEX
TAG-217 used the ARTEX AI framework in attacks that exposed data on 68,000 people at South Korean banks.
74
TAG-193’s Regional Espionage Operations
TAG-193 ran regional government espionage, adding WinRAR CVE-2025-8088 exploitation to its phishing and reverse-shell toolkit.
76
September 2026 CVE Landscape
Recorded Future says 80 vulnerabilities were actively exploited in September 2026, including NetScaler zero-days.
85
Recorded Future Debuts Autonomous Defense, Built for Machine-Speed Threats
Recorded Future debuted an autonomous defense platform that acts on threat intelligence at machine speed.
28
The Lure Isn't The Malware. It's Your Logo.
Recorded Future launches Malicious Site Monitoring in Digital Risk Protection, showcasing ClickFix brand-impersonation detection with AI triage.
15
August 2026 CVE Landscape
Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.
68
Recorded Future Announces Automated Signature Creation, Accelerating Vulnerability Prioritization
Recorded Future launched Automated Signature Creation in ASI, turning new CVEs into deployable detection signatures in as little as 31 minutes.
32
H1 2026 Malware Vulnerability Trends
Recorded Future's H1 2026 report finds 215 actively exploited CVEs, RAT dominance, NFC payment fraud, and AI-augmented but not autonomous tradecraft.
78
Russian APT BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic Organizations
Russian GRU-linked BlueDelta (APT28) deployed HOOKEDGE backdoor via macro Word lures against European governments using webhook.site and Microsoft Edge for stealthy C2.
78
How Ransomware Gangs Use Automation, and How You Can Beat It
Recorded Future outlines ten automation strategies ransomware gangs use, from credential marketplaces to bulletproof hosting, urging intelligence-led defense.
22
Malware Crypting Services and the Threat Actors Who Sell Them
Recorded Future's Insikt Group profiles 24 threat actors selling malware crypting services and urges defenders to favor behavioral detection over static analysis.
55
Related CVEs
by mentions- CVE-2026-7289899%10.0Unauthenticated SQL Injection in Metabase Grants Admin Access
- CVE-2025-808894%8.4WinRAR Path Traversal (CVE-2025-8088) Enables Arbitrary Code Execution
- CVE-2026-543022%10.0Unauthenticated JWT Algorithm Bypass in WSO2 API Manager and Gateways
- CVE-2021-44228100%10.0JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
- CVE-2026-1949033%9.3Remote Authentication Bypass in Citrix NetScaler ADC and NetScaler Gateway
- CVE-2026-7136290%9.1Unauthenticated Privilege Escalation Flaw in Adobe Commerce (Magento)
- CVE-2026-72733%8.8Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
- CVE-2026-58704<1%8.8Permission Bypass in Google Pixel Cellular Modem Allows Proximal Privilege Escalation
- CVE-2026-4871070%6.5HTTP Request Smuggling in Kludex Starlette (CVE-2026-48710)
- CVE-2026-598002%9.29Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint (this route is not…
Appears with
- Recorded Futureorganization · 15
- Recorded Futurevendor · 5
- TAG-217threat actor · 4
- ARTEXproduct · 4
- DeepSeekai model · 4
- CISAorganization · 3
- Grokai model · 3
- Microsoftvendor · 3
- Claude Codeproduct · 3
- PolyFuckedthreat actor · 2
- Polymarketproduct · 2
- Zhipu AIorganization · 2
- TAG-193threat actor · 2
- GitHubproduct · 2
- Metabaseproduct · 2
- Cisco Talosorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.