Hackers Use Fake T-Mobile Rewards Expiry Texts to Lure Users to Phishing Sites
Malwarebytes tracks a T-Mobile smishing campaign using 1,000+ fake rewards-expiry text templates and 81+ disposable .top domains to steal credentials and payment data.
45
Vendor
T-Mobile
- Mentions · 7d0
- Mentions · 30d0
- All mentions5
- First seenAug 21, 2026
- Last mentionedSep 18, 2026
Timeline
5 articles · newest firstScammers Tell T-Mobile Users Their Rewards Are Expiring to Trick Them Into Clicking Phishing Links
Malwarebytes tracked a large T-Mobile smishing campaign using 81+ rotating .top domains and 1,000+ template variants to harvest credentials via fake rewards-expiry lures.
45
T-Mobile rewards points expiry texts are a phishing scam
Malwarebytes tracks an SMS phishing campaign, active since May 2026, impersonating T-Mobile rewards expiry with 1,000+ templates and 81 rotating domains to lure victims.
48
ICE Wants to Know Everyone Who Bought a Certain Green Beanie From REI in the Last 2 Years
DHS subpoenaed REI for all Minneapolis-area customers who bought a specific green beanie since 2024, part of an investigation into 39 ICE protest defendants.
32
Risky Bulletin: Academics find source code overlaps between Geedge and China's Great Firewall
Academics linked Chinese vendor Geedge Networks' Tiangou Secure Gateway source code to one of the Great Firewall's three traffic filtering capabilities.
48
Appears with
- Malwarebytesvendor · 3
- T-Mobileorganization · 3
- T-Mobile Rewardsproduct · 2
- Apple American Groupvictim · 1
- Alationvictim · 1
- US Attorney's Office in Minnesotaorganization · 1
- YouTubeproduct · 1
- Salt Typhoonthreat actor · 1
- US Senateorganization · 1
- EFForganization · 1
- Redditvendor · 1
- TaxActvictim · 1
- Latvia road traffic agency (CSDD)victim · 1
- ClarityCheckvendor · 1
- Bill Marczakorganization · 1
- Malwarebytes Mobile Securityproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.