MalwareTips says Promonowusa.com's big retailer gift card is bait for an affiliate funnel: visitors give away personal data and sign up for sponsored deals, but no card arrives.
The Central Bank of Ireland warns that 'Marilla Capital ICAV (CLONE)' copied the name and authorisation details of a genuine Irish fund to add legitimacy to a scam, using marillacapitalicav.com.
BaFin says euramcoassets.ltd is suspected of offering crypto-asset services without authorisation and is misusing the identity of the genuine EURAMCO Group, which has no connection to the site.
euramcoassets.ltd
Unauthorised crypto-asset services offered on euramcoassets.ltd
ThreatFabric found "Hirudo", Android malware that swaps real Indonesian banking apps for patched copies to bypass security checks and steal credentials.
A fake "Google Chrome" app from developer Hizbartech appeared as a sponsored Google Play listing with over 100,000 downloads; it was really an ad-filled chat app.
Google Play developer 'Hizbartech'; fake app listing 'Google Chrome' (formerly 'Ball Bounce')
Luxembourg's CSSF warns that unknown persons are misusing the former name "Arche Associés S.A." of investment firm CORIENT S.A. via arche-associes-lu.com.
arche-associes-lu.com
Uses former name 'Arche Associés S.A.' of CORIENT S.A.; claimed address 37 b A Avenue JF Kennedy, L-1855 Luxembourg
Germany's BaFin warns that leo-invest.de may be offering financial and securities services without authorisation and falsely claims a connection to Munich-based LEO GP GmbH.
The UK FCA warns that quorumcapitalltd.com is a clone firm pretending to be the authorised firm Quorum Capital Limited; the genuine firm has no connection to it.
A Dismislab investigation found a fake Indian Visa Application Centre site, app.ivcabd.com, sent by SMS to Bangladeshi applicants, used a Tk9 "verification" fee to link and drain bKash wallets.
Jet2 warned on X that the account @Jet2tweets__h is fake and not affiliated with Jet2holidays; its only official account is @jet2tweets with a gold tick.
South Africa's FSCA warns that someone using the name "Lucas Ludka", falsely claiming to be an FSCA lawyer, is offering fake grant-fund refunds over WhatsApp from 372 5616 2589.
372 5616 2589
Name used by impersonator: 'Lucas Ludka' (does not work for the FSCA)
Proofpoint identified a website for a "BIOTOLD" biotech conference at Boston's Omni Seaport hotel (listed Nov. 5–6, 2026) as fake: a front for a criminal malware group.
Nigerian airline Air Peace warned that a fraudster posing as its customer service on WhatsApp (08082894680) is taking payments from travellers into non-Air Peace accounts.