Beware of Fake FlipperZero Sites That Promise Free Device Offer

A website pretending to be Flipper Devices offers a free FlipperZero in exchange for completing an offer, but it merely directs users to insecure browser extensions and fraudulent websites.

Flipper Zero is a portable multi-functional cybersecurity gadget designed for pen testers and hackers.

The tool supports RFID emulation, digital access key cloning, radio communications, NFC, infrared, Bluetooth, and other devices, allowing researchers to experiment with a wide range of hardware.

Through a Kickstarter crowdsourcing initiative that raised $4.8 million, it was originally revealed in August 2020.

It is hardly unexpected that scammers are attempting to capitalize on the product’s success by mimicking the brand.

Scammers Impersonating the Brand

According to Bleeping Computer, the website flipperzero[.] was promoted on social media and Reddit, offering to give free Flipper Zero gadgets by simply filling out an offer.

Fake FlipperZero site [Bleeping computer]

The site pretending to be the real https://flipperzero.one/ site, including utilizing the “Copyright 2023 – flipperzero – All Rights Reserved” statement and its Terms of Use and Privacy Pages linking to the legitimate site.

Flipperzero copyright

However, most of the other links on the page go to offers hosted on the website https://trkrspace[.]com, which is notorious for hosting weird affiliate sites, surveys, and browser notification frauds.

Despite the possibility of receiving the device after completing an offer, a security researcher informed that many of the offers from these websites are fake and exist only to gather user data for use in phishing scams and other malicious campaigns.

Offered survey

Particularly, while testing several of the displayed browser warning sites, browser tech support scams indicating that a “subscription payment” had failed, our system was overloaded, or that we need security software.

Scam ads displayed by browser notifications

To safeguard customers, Fipper Devices said that they have no affiliation and are seeking to have the site deactivated.

“We can confirm that this website is not affiliated with Flipper Devices,” Flipper Devices said.

“Various websites appear from time to time, we found this one earlier, and we have a process of dealing with them to protect our customers.”

Unfortunately, the website is still active today; therefore, it is essential to watch out for the offers and only shop via the legitimate store.

Keep yourself informed about the latest Cyber Security News by following us on GoogleNews, Linkedin, Twitter, and Facebook.

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

NCSC Issues Alert on MOONSHINE and BADBAZAAR Mobile Malware

GCHQ’s National Cyber Security Centre (NCSC), in collaboration with international and industry partners, has issued…

14 minutes ago

20 Best Incident Response Tools in 2025

In today's digital era, organizations face an ever-growing threat landscape, with cyberattacks, data breaches, and…

2 hours ago

Chrome Use-After-Free Vulnerability Enables Remote Code Attacks

Google has rolled out a critical update for its Chrome browser, addressing a high-severity vulnerability…

2 hours ago

Windows CLFS 0-Day Vulnerability Exploited in the Wild

Microsoft has disclosed an active exploitation of a zero-day vulnerability in the Windows Common Log…

2 hours ago

Kibana Releases Security Patch to Fix Code Injection Vulnerability

Elastic, the company behind Kibana, has released critical security updates to address a high-severity vulnerability…

2 hours ago

AWS Systems Manager Plugin Flaw Allows Arbitrary Code Execution

A recently discovered vulnerability in the AWS Systems Manager (SSM) Agent, a cornerstone of Amazon…

3 hours ago