Search results are sending people to fake Bitrefill checkouts

Cybercriminals are using fake websites that mimic the legitimate Bitrefill site to defraud users. These lookalike sites appear in search engine results and use domains similar to Bitrefill's, including Punycode variants. Victims are tricked into completing checkout processes that resemble Bitrefill's, paying cryptocurrency to attacker-controlled addresses with no recovery option. The campaign uses sophisticated analytics to optimize victim conversion, indicating organized criminal activity.

• How to download and read ebooks safely | Kaspersky official blogAnalysis2026-10-30
• Managed for Malice: How Attackers Turn MDM into Remote AccessCampaign2026-10-28
• How VBScript Malware Evades Detection Using Trusted Tools CopyMalware2026-10-27
• Tricks from the Past deployed via signed ChatGPT and Claude binariesMalware2026-10-27
• Microsoft Teams to get AI-powered, context-aware phishing detectionNews2026-10-23