Saturday, November 2, 2024
Homecyber securityBeware of Fake FlipperZero Sites That Promise Free Device Offer

Beware of Fake FlipperZero Sites That Promise Free Device Offer

Published on

Malware protection

A website pretending to be Flipper Devices offers a free FlipperZero in exchange for completing an offer, but it merely directs users to insecure browser extensions and fraudulent websites.

Flipper Zero is a portable multi-functional cybersecurity gadget designed for pen testers and hackers.

The tool supports RFID emulation, digital access key cloning, radio communications, NFC, infrared, Bluetooth, and other devices, allowing researchers to experiment with a wide range of hardware.

- Advertisement - SIEM as a Service

Through a Kickstarter crowdsourcing initiative that raised $4.8 million, it was originally revealed in August 2020.

It is hardly unexpected that scammers are attempting to capitalize on the product’s success by mimicking the brand.

Scammers Impersonating the Brand

According to Bleeping Computer, the website flipperzero[.] was promoted on social media and Reddit, offering to give free Flipper Zero gadgets by simply filling out an offer.

Fake FlipperZero site [Bleeping computer]

The site pretending to be the real https://flipperzero.one/ site, including utilizing the “Copyright 2023 – flipperzero – All Rights Reserved” statement and its Terms of Use and Privacy Pages linking to the legitimate site.

Flipperzero copyright

However, most of the other links on the page go to offers hosted on the website https://trkrspace[.]com, which is notorious for hosting weird affiliate sites, surveys, and browser notification frauds.

Despite the possibility of receiving the device after completing an offer, a security researcher informed that many of the offers from these websites are fake and exist only to gather user data for use in phishing scams and other malicious campaigns.

Offered survey

Particularly, while testing several of the displayed browser warning sites, browser tech support scams indicating that a “subscription payment” had failed, our system was overloaded, or that we need security software.

Scam ads displayed by browser notifications

To safeguard customers, Fipper Devices said that they have no affiliation and are seeking to have the site deactivated.

“We can confirm that this website is not affiliated with Flipper Devices,” Flipper Devices said.

“Various websites appear from time to time, we found this one earlier, and we have a process of dealing with them to protect our customers.”

Unfortunately, the website is still active today; therefore, it is essential to watch out for the offers and only shop via the legitimate store.

Keep yourself informed about the latest Cyber Security News by following us on GoogleNews, Linkedin, Twitter, and Facebook.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

LightSpy iOS Malware Enhanced with 28 New Destructive Plugins

The LightSpy threat actor exploited publicly available vulnerabilities and jailbreak kits to compromise iOS...

ATPC Cyber Forum to Focus on Next Generation Cybersecurity and Artificial Intelligence Issues

White House National Cyber Director, CEOs, Key Financial Services Companies, Congressional and Executive Branch...

New PySilon RAT Abusing Discord Platform to Maintain Persistence

Cybersecurity experts have identified a new Remote Access Trojan (RAT) named PySilon. This Trojan...

Konni APT Hackers Attacking Organizations with New Spear-Phishing Tactics

The notorious Konni Advanced Persistent Threat (APT) group has intensified its cyber assault on...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

LightSpy iOS Malware Enhanced with 28 New Destructive Plugins

The LightSpy threat actor exploited publicly available vulnerabilities and jailbreak kits to compromise iOS...

New PySilon RAT Abusing Discord Platform to Maintain Persistence

Cybersecurity experts have identified a new Remote Access Trojan (RAT) named PySilon. This Trojan...

Konni APT Hackers Attacking Organizations with New Spear-Phishing Tactics

The notorious Konni Advanced Persistent Threat (APT) group has intensified its cyber assault on...