Tuesday, May 13, 2025
Homecyber securityBeware of Fake FlipperZero Sites That Promise Free Device Offer

Beware of Fake FlipperZero Sites That Promise Free Device Offer

Published on

SIEM as a Service

Follow Us on Google News

A website pretending to be Flipper Devices offers a free FlipperZero in exchange for completing an offer, but it merely directs users to insecure browser extensions and fraudulent websites.

Flipper Zero is a portable multi-functional cybersecurity gadget designed for pen testers and hackers.

The tool supports RFID emulation, digital access key cloning, radio communications, NFC, infrared, Bluetooth, and other devices, allowing researchers to experiment with a wide range of hardware.

- Advertisement - Google News

Through a Kickstarter crowdsourcing initiative that raised $4.8 million, it was originally revealed in August 2020.

It is hardly unexpected that scammers are attempting to capitalize on the product’s success by mimicking the brand.

Scammers Impersonating the Brand

According to Bleeping Computer, the website flipperzero[.] was promoted on social media and Reddit, offering to give free Flipper Zero gadgets by simply filling out an offer.

Fake FlipperZero site [Bleeping computer]

The site pretending to be the real https://flipperzero.one/ site, including utilizing the “Copyright 2023 – flipperzero – All Rights Reserved” statement and its Terms of Use and Privacy Pages linking to the legitimate site.

Flipperzero copyright

However, most of the other links on the page go to offers hosted on the website https://trkrspace[.]com, which is notorious for hosting weird affiliate sites, surveys, and browser notification frauds.

Despite the possibility of receiving the device after completing an offer, a security researcher informed that many of the offers from these websites are fake and exist only to gather user data for use in phishing scams and other malicious campaigns.

Offered survey

Particularly, while testing several of the displayed browser warning sites, browser tech support scams indicating that a “subscription payment” had failed, our system was overloaded, or that we need security software.

Scam ads displayed by browser notifications

To safeguard customers, Fipper Devices said that they have no affiliation and are seeking to have the site deactivated.

“We can confirm that this website is not affiliated with Flipper Devices,” Flipper Devices said.

“Various websites appear from time to time, we found this one earlier, and we have a process of dealing with them to protect our customers.”

Unfortunately, the website is still active today; therefore, it is essential to watch out for the offers and only shop via the legitimate store.

Keep yourself informed about the latest Cyber Security News by following us on GoogleNews, Linkedin, Twitter, and Facebook.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Hackers Abuse PyInstaller to Deploy Stealthy macOS Infostealer

Jamf Threat Labs has identified a novel macOS infostealer that exploits PyInstaller, a legitimate...

PupkinStealer Targets Windows Users to Steal Browser Login Credentials

A newly identified information-stealing malware dubbed PupkinStealer has emerged as a significant threat to...

Repeated Firmware Key-Management Failures Undermine Intel Boot Guard and UEFI Secure Boot

The security of fundamental technologies like Intel Boot Guard and UEFI Secure Boot has...

INE Security Alert: Top 5 Takeaways from RSAC 2025

Comprehensive Training Platform Delivers Solutions for AI Security, Cloud Management, and Incident Response Readiness. Fresh...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Hackers Abuse PyInstaller to Deploy Stealthy macOS Infostealer

Jamf Threat Labs has identified a novel macOS infostealer that exploits PyInstaller, a legitimate...

PupkinStealer Targets Windows Users to Steal Browser Login Credentials

A newly identified information-stealing malware dubbed PupkinStealer has emerged as a significant threat to...

Repeated Firmware Key-Management Failures Undermine Intel Boot Guard and UEFI Secure Boot

The security of fundamental technologies like Intel Boot Guard and UEFI Secure Boot has...