August 02, 2023

Sha zhu pan scam uses AI chat tool to target iPhone and Android users

“CryptoRom” fake crypto-trading mobile apps pushed through AI-assisted romance scam, using ChatGPT to lure targets.

Threat Research

February 28, 2023

Sour Grapes: stomping on a Cambodia-based “pig butchering” scam

A text message leads to discovery of a vast scam infrastructure run by Chinese cyber-criminals.

Threat Research

February 01, 2023

Fraudulent “CryptoRom” trading apps sneak into Apple and Google app stores

Using changing remote content, apps slide by official review process to deliver fraud through the Apple App Store and Google Play Store.

Threat Research

December 01, 2022

S3 Ep111: The business risk of a sleazy “nudity unfilter” [Audio + Text]

Latest episode - listen now (or read if you prefer)...

Naked Security

November 23, 2022

Multimillion dollar CryptoRom scam sites seized, suspects arrested in US

Five tips to keep yourself, and your friends and family, out of the clutches of "chopping block" scammers...

Naked Security

October 11, 2022

Sophos researchers win Virus Bulletin technical research award

The prestigious Péter Szőr Award is presented at Virus Bulletin for the best technical research of the year.

Products & Services

March 16, 2022

Beware bogus Betas – cryptocoin scammers abuse Apple’s TestFlight system

"Install this moneymaking app" - this one is so special that it isn't available on Google Play or the App Store!

Naked Security

March 16, 2022

CryptoRom Bitcoin swindlers continue to target vulnerable iPhone and Android users

Abuse of iOS TestFlight and WebClips—along with social engineering and lookalike web pages—lead to double- and triple-dipping by criminals into victims' pockets.

Threat Research

October 13, 2021

CryptoRom fake iOS cryptocurrency apps hit US, European victims for at least $1.4 million

Scammers combine romantic lures with crypto scams, abusing Apple's ad-hoc app distribution to steal millions from people around the world.

Threat Research