Ready-made $500 kit puts a crypto scam within anyone's reach
A $500 ready-made scam kit sold on a cybercrime forum builds fake Tesla $TSLA presale pages that harvest wallet recovery phrases and cryptocurrency deposits.
Malwarebytes found a $500 scam-in-a-box kit by seller xrep on a cybercrime forum, bundling a fake Tesla-style $TSLA presale site, a victim-tracking admin panel, and controls to inflate fake balances. The kit harvests 12-word wallet recovery phrases via wallet-connection prompts or accepts direct transfers in Bitcoin, Ethereum, USDT, or Dogecoin. The admin panel lets operators check stolen wallets' value before draining them, raise displayed balances to encourage further deposits, and send follow-up messages demanding fake network fees.
- Fake eligibility check pulls a visitor's X profile photo to make the presale feel personalized.
- Admin panel checks wallet balances before draining and can inflate displayed balances to lure more deposits.
- Operators follow up claiming delays and extra network fees to extract repeat payments.
- Kit supports multiple languages, works on mobile and desktop, and creates false urgency with countdowns.
- Vendors
- Malwarebytes
- Products
- $TSLA tokenscam kit
- Threat actors
- xrep
- Victims
- crypto investors
- Organizations
- MalwarebytesTesla
From the original article
2 min read at helpnetsecurity.com
A seller on a cybercrime forum is offering a ready-made scam kit for $500, complete with an admin panel that tracks victims, checks their crypto wallets for value, and inflates fake balances to squeeze out more money, Malwarebytes found. Researchers discovered the scam project on May 16 and described it as an example of how social engineering , phishing , and financial fraud can be combined into a single operation.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.