# Threat Intel Published articles for Threat Intel. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Fake parcel delivery messages steal your card and bank details DevFeed: [Fake parcel delivery messages steal your card and bank details]() Original publisher: [Read original article]() Author: Mieke Verburgh Published: 2026-09-18T07:44:22Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [Security](), [online privacy]() Tags: [banking](), [card](), [delivery](), [email](), [financial](), [personal](), [phishing](), [scams](), [security](), [threat-intel]() ### AI overview The article describes parcel-delivery phishing campaigns that impersonate postal and courier services. A Belgian bpost campaign uses a small unpaid-customs-fee claim to direct victims to a fake website that collects personal, card, and banking information. ### Source excerpt Parcel delivery phishing messages impersonate familiar couriers and use small fees or promised refunds to steal personal and financial information. ## Revolut phishing texts appear days after data breach DevFeed: [Revolut phishing texts appear days after data breach]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-17T14:07:15Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Social engineering](), [passwords](), [VirusTotal]() Tags: [account](), [breach](), [password](), [phishing](), [revolut](), [scam](), [scams](), [social-engineering](), [threat-intel]() ### AI overview Revolut customers received phishing texts days after the bank disclosed customer data to a government impostor. The report says the campaign's connection to the breach is not yet known and describes a fake identity check designed to obtain passwords. ### Source excerpt Revolut customers received phishing texts only days after the digital bank acknowledged disclosing customer data to a government impostor. ## T-Mobile rewards points expiry texts are a phishing scam DevFeed: [T-Mobile rewards points expiry texts are a phishing scam]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-17T10:44:01Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [account](), [App]() Tags: [customer](), [links](), [messages](), [phishing](), [points](), [reward-points](), [rewards-points](), [scam](), [scams](), [t-mobile](), [threat-intel]() ### AI overview Malwarebytes reports a phishing campaign that sends fake T-Mobile rewards-point expiry messages. The messages use invented balances, urgent expiry dates, and phishing links to pressure recipients into clicking before verifying the claim. ### Source excerpt A large phishing campaign is using fake T-Mobile rewards points and looming expiry dates to pressure recipients into clicking malicious links. ## AI helps scammers build convincing antivirus renewal pages DevFeed: [AI helps scammers build convincing antivirus renewal pages]() Original publisher: [Read original article]() Author: Stefan Dasic Published: 2026-09-16T08:41:19Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [Artificial Intelligence](), [Security](), [remote access software]() Tags: [ai](), [remote-access-software](), [scams](), [security](), [threat-intel]() ### AI overview The article examines an Avast impersonation site targeting users in Belgium with a fake EUR 129.99 antivirus renewal notice. It reports that the polished design and fluent copy showed signs of AI assistance, while a cancellation form collected names, email addresses, and Belgian mobile numbers for possible follow-up scams. ### Source excerpt A fake Avast renewal page shows how AI is helping scammers create more convincing traps with polished designs and fluent copy. ## Search results are sending people to fake Bitrefill checkouts DevFeed: [Search results are sending people to fake Bitrefill checkouts]() Original publisher: [Read original article]() Author: Stefan Dasic Published: 2026-09-15T08:40:22Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Cryptocurrency](), [Bitcoin](), [Website]() Tags: [bitcoin](), [cryptocurrency](), [fraud](), [payments](), [phishing](), [qr-code](), [scam](), [scams](), [search](), [threat-intel]() ### AI overview Fake Bitrefill checkout pages are appearing in search results and copying the company's branding and payment flow. They persuade victims to send cryptocurrency to scammer-controlled addresses, with no goods delivered and little chance of recovering the payment. ### Source excerpt Fake Bitrefill checkout pages are appearing in search results and tricking people into sending cryptocurrency directly to scammers. ## Flirty OnlyFans promoters on X may be using AI to appear human DevFeed: [Flirty OnlyFans promoters on X may be using AI to appear human]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-07T11:18:00Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [AI Chat](), [Script](), [Chat Bot](), [Bot](), [ASCII]() Tags: [ai](), [ascii](), [bots](), [fraud](), [generative-ai](), [messaging](), [onlyfans](), [scam](), [scams](), [scripted](), [threat-intel](), [voice]() ### AI overview An investigation examines X accounts promoting OnlyFans pages that combine repetitive flirtatious scripts with dynamic replies, raising the possibility of generative AI-assisted messaging. It warns that personalized responses and voice notes may no longer reliably distinguish people from automated accounts. ### Source excerpt Personalized replies and voice notes make it increasingly difficult to tell whether you're talking to a human, chatbot, or AI agent. ## StreamRat Android malware spreads through Meta and TikTok ads DevFeed: [StreamRat Android malware spreads through Meta and TikTok ads]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-03T16:04:24Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [StreamRAT](), [Malware](), [Social engineering](), [passwords]() Tags: [ads](), [advertising](), [android](), [browser](), [malware](), [meta](), [news](), [passwords](), [scam](), [security](), [social-media](), [streaming](), [streamrat](), [threat-intel](), [tiktok]() ### AI overview A malicious ad campaign used fake streaming-service promotions on Meta and TikTok to distribute the StreamRat Android banking Trojan. The campaign directed Android users to a tailored download page that coached them past security warnings and enabled credential theft and remote device control. ### Source excerpt Social media ads for a free streaming service exposed roughly 570,000 people to StreamRat, a banking Trojan that can take control of infected phones. ## DNS Security DevFeed: [DNS Security]() Original publisher: [Read original article]() Author: Adam Published: 2019-06-13T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [DNS security](), [Security]() Tags: [cyber](), [deploy](), [dns](), [dns-security](), [easy](), [effective](), [report](), [research](), [security](), [threat-intel]() ### AI overview The Global Cyber Alliance published research by Jay Jacobs, Wade Baker, and the author on the value of DNS security. The article says DNS providers using threat intelligence to block malicious sites can be effective and easy to deploy, citing a report that says DNS security can mitigate one-third of cyber incidents. ### Source excerpt I'm happy to say that some new research by Jay Jacobs, Wade Baker, and myself is now available, thanks to the Global Cyber Alliance.