Skip to content
Scammers.com

Search results

FBI 'FaceStealer' warning: fake Zoom meeting links such as uu01webzoom.us used to infect crypto workers

Help Net Security reported today on the FBI's warning about 'FaceStealer', a scheme the FBI attributes to North Korean state hackers (tracked as Sapphire Sleet, BlueNoroff and APT38, among other names) that has stolen…

  • uu01webzoom.us
  • Lookalike Zoom domain named by FBI; scheme attributed to Sapphire Sleet / BlueNoroff / APT38
  • Fake Zoom or meeting-invite credential / malware lures
Reported Nov 13, 20261 report
Screenshot of a SharePoint-themed phishing lure page showing a verification code and a "Continue to SharePoint" button
PhishingReviewed

LevelBlue: 'BlackApex' device-code phishing kits steal Microsoft 365 tokens via fake SharePoint and Zoom lures

LevelBlue SpiderLabs described on 30 October 2026 “BlackApex”-family phishing kits that use fake SharePoint and Zoom pages to get victims to approve a Microsoft device code and give attackers Microsoft 365 tokens. Microsoft and Zoom are not involved.

  • miscrosoftonlinesecuredemandocument.com
  • Also securemsexcel.online, 1mdrvpdf-rfqonlineinvite.com; kit panels BlackApex, DarkApex, SPY, XXX101
  • Microsoft 365 device-code phishing kits
Reported Oct 30, 20261 report
Screenshot of the phishing email inviting recipients to a private Anthropic AI preview
PhishingReviewed

Fake 'Anthropic AI preview' invites lead to Google/Microsoft phish on us968web-zoom.us

Cofense reports fake "Anthropic AI preview" invitations, abusing GoTo Webinar and a Zapier link shortener, that lead to Google and Microsoft credential-phishing pages on lookalike domains.

  • us968web-zoom.us
  • Phishing hosts: goo.gle-access-eventregister.icu, office.com-access-sharepoint.com; sender name 'Austin from nthropic'
  • Fake Zoom or meeting-invite credential / malware lures
Reported Oct 29, 20261 report

Results reflect reports submitted to Scammers.com. Entries marked “Unverified” have not yet been reviewed. A listing is not a finding that any person or business committed fraud.