CTM360 Reports &
Threat Insights

Actionable intelligence on fraud, scams, malware, and cyber threats
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
hero background graphics
ClickFix & Beyond: Mapping the expanding family of user-assisted malware delivery techniques
September 22, 2026

ClickFix & Beyond

CTM360 examines the evolution of ClickFix and the expanding ecosystem of user-assisted malware delivery, including fake CAPTCHA lures, compromised websites, PowerShell execution, and malware delivery infrastructure.

Read More
RecruitTrap Browser-in-the-Browser phishing campaign impersonating recruiters through fake job portals and login windows to steal credentials
August 13, 2026

RecruitTrap: The Growing Threat of Browser-in-the-Browser (BitB) Recruitment Scams

CTM360 exposes RecruitTrap, a global Browser-in-the-Browser (BitB) phishing campaign using fake recruiter invitations and counterfeit login windows to compromise professional accounts

Read More
The InsureTrap phishing campaign impersonating insurance providers to steal customer credentials and one-time passwords
July 22, 2026

The InsureTrap: Real-Time Phishing & Account Hijacking Through Fake Insurance Portals

CTM360 exposes The InsureTrap phishing campaign and the previously undocumented InsureOTP Kit used to steal insurance customer credentials and hijack online accounts in real time.

Read More
FreeWatch phishing campaign impersonating retail banks through fake smartwatch giveaway advertisements targeting banking customers
June 15, 2026

FreeWatch: Smartwatch Giveaway Scam Impersonating Retail Banks

CTM360 investigates the FreeWatch phishing campaign targeting retail banking customers across MENA and GCC through fake smartwatch giveaways designed to steal banking credentials and OTPs.

Read More
Global BTMOB Android malware campaign leveraging remote access trojan capabilities, surveillance features, and mining infrastructure
June 6, 2026

BTMOB-Driven Android Malware: Emerging Risk Globally

CTM360 analyzes a large-scale global BTMOB Android malware campaign spanning hundreds of malicious APKs, uncovering extensive command-and-control infrastructure, surveillance capabilities, and mining-related activity

Read More
Illustration showing cybercriminal scam networks targeting FIFA World Cup 2026 fans through fake ticketing websites, phishing campaigns, and malicious streaming platforms.
May 24, 2026

FIFA World Cup 2026 – Scams Surge as Fraud Networks Target Fans Worldwide

CTM360 researchers reveal a large-scale cyber fraud ecosystem exploiting FIFA World Cup 2026 excitement through fake ticketing portals, betting scams, phishing campaigns, and malicious streaming platforms targeting fans worldwide.

Read More
FEMITBOT Telegram Mini Apps fraud infrastructure targeting crypto and financial services users
May 2, 2026

FEMITBOT: Abuse of Telegram Mini Apps for Large-Scale Fraud Campaigns

CTM360 reveals FEMITBOT, a scalable fraud infrastructure leveraging Telegram Mini Apps to impersonate brands and run global campaigns across multiple industries

Read More
BTMOB-driven Android malware targeting mobile devices in Pakistan with remote access and mining capabilities
April 30, 2026

BTMOB-Driven Android Malware: Emerging Risk in Pakistan

CTM360 researchers analyzed a BTMOB-driven Android malware sample exhibiting remote access trojan functionality, device surveillance capabilities, and mining-related communications observed in Pakistan

Read More
Email spoofing campaigns targeting GCC banking sector with large-scale fraudulent email distribution
April 30, 2026

Email Spoofing Threats Targeting the GCC Region

CTM360 analyzes large-scale email spoofing attacks targeting the GCC banking sector, highlighting impersonation techniques, authentication gaps, and defensive measures.

Read More
Government impersonation phishing GovTrap scams report showing fake government portals and malicious domains
April 27, 2026

Government Impersonation Phishing: The Rise of “GovTrap” Scams

CTM360 investigates the rise of GovTrap scams, where attackers impersonate government platforms using phishing portals, fraudulent domains, and credential harvesting infrastructure

Read More
Cybercriminals distributing Ninja Browser and Lumma Infostealer via Google Groups and Discussions
February 12, 2026

Ninja Browser & Lumma Infostealer Distribution

Attackers are leveraging Google Groups and Discussions to distribute Ninja Browser and Lumma Infostealer malware through links disguised as legitimate software. CTM360 actively monitors and mitigates this emerging social engineering threat

Read More
Visual showing HYIP risks, fake websites, and Ponzi scheme structure
February 2, 2026

HYIPs: High Yield Investment Platforms & Risks Explained

Learn how HYIPs lure investors with promises of quick profits and why they ultimately collapse

Read More
Visual representation of fake banking websites impersonating legitimate US and UK financial institutions to conduct large-scale online fraud
January 18, 2026

The Rise of Fake Banks – USA & UK Fraud Campaign

This report analyzes an active fake banking campaign targeting users in the United States and the United Kingdom, where fraudulent websites impersonate legitimate financial institutions and regulators to extract fees through deceptive onboarding and fake financial services.

Read More
Illustration showing fraudulent fashion e-commerce websites impersonating trusted brands as part of large-scale online scam campaigns
January 18, 2026

FraudWear – Brand Impersonation Threat in Fashion E-Commerce

FraudWear examines the rising wave of brand-impersonating online stores in the fashion e-commerce sector, highlighting how cybercriminals exploit consumer trust through realistic websites, deceptive advertising, and evolving fraud tactics.

Read More
Diagram illustrating ShadowRemit malicious Android apps impersonating Google Play remittance services for illegal money transfers
January 14, 2026

ShadowRemit – Malicious Android Remittance Campaign Overview

ShadowRemit is a malicious Android campaign using fake Google Play impersonation pages to distribute unauthorized remittance apps enabling illegal money transfers.

Read More
Infographic detailing the "HackOnChat" WhatsApp account hijacking scam discovered by CTM360.
November 19, 2025

HackOnChat: The WhatsApp Hacking Scam Explained

CTM360 report details "HackOnChat," a large-scale phishing campaign designed to hijack WhatsApp accounts using deceptive websites and social engineering.

Read More
CTM360 Postal-Courier Con scam report cover
September 3, 2025

Postal Courier Con - Inside the World’s Largest Postal & Courier Scam Campaigns

Explore CTM360’s latest report on postal and courier scams, revealing over 50,000 fraudulent URLs and exposing global scam campaigns targeting top brands worldwide. Stay informed and secure.

Read More
Graphic depicting online scam traps and digital fraud threats
August 24, 2025

Scam Hooks – How Even Smart People Take the Bait

CTM360’s Scam Hooks report exposes the advanced tactics scammers use to deceive even savvy users, including AI-driven scams, deepfakes, and phishing strategies. Learn how to detect and avoid them.

Read More
FraudOnTok campaign targeting TikTok Shop users with SparkKitty spyware
August 4, 2025

FraudOnTok – The SparkKitty Drop on TikTok Shops

CTM360 uncovers “FraudOnTok,” a TikTok Shop scam campaign using phishing sites, fake Meta ads, and trojanized APKs to deploy SparkKitty spyware

Read More
Fake news websites scam users with investment fraud – CTM360's BaitTrap Report
July 7, 2025

BaitTrap – The Rise of Baiting News Sites

CTM360’s BaitTrap report exposes a widespread scam network using fake news websites to promote fraudulent investments via platforms like Trap10 and Eclipse Earn.

Read More
Thumbnail image showing the stages of an info-stealer attack—from delivery to data distribution—in a cybersecurity context
June 17, 2025

Info-Stealers Malware Report: Understanding the Silent Data Threat

Explore how info-stealer malware quietly breaches systems, steals sensitive data, and evades detection. Learn practical defenses for individuals and businesses.

Read More
Visual of UK retail ransomware attack and mitigation strategies
May 14, 2025

Don’t Be the Next Headline: How to Harden Against Ransomware Report

CTM360’s latest report breaks down the UK retail ransomware campaign and offers specific mitigation steps across all stages of the attack chain.

Read More
Phishing campaign simulating full online banking sessions to steal corporate credentials
May 14, 2025

CyberHeist Phish Report: Simulating a Full Corporate Banking Breach

CTM360 uncovers CyberHeist Phish, a campaign that mimics corporate banking logins to steal credentials and bypass 2FA with real-time interaction.

Read More
Phishing campaign targeting Meta Business Suite users
May 14, 2025

Meta Mirage Report: Inside a Global Meta Phishing Operation

CTM360 reveals the Meta Mirage campaign—a global phishing threat targeting Meta Business Suite accounts with fake alerts and impersonation tactics.

Read More
CTM360 analysis of PointyPhish and TollShark phishing campaigns using fake websites and SMS tactics to steal personal and financial data globally.
April 15, 2025

PointyPhish & TollShark Report: Exposing the Global Phishing & Fraud Network

CTM360 exposes the global rise of SMS phishing scams, PointyPhish and TollShark, driven by the Darcula phishing kit. Discover key insights in the latest report.

Read More
Play Masquerading Party scam campaign analysis by CTM360 exposing fake Play Store websites and malware variants targeting Android users globally.
April 9, 2025

Play Masquerading Party (PMP) Report: Unveiling the Global Play Store Impersonation Scam

CTM360 uncovers PMP – an advanced Play Store impersonation scam. Discover five powerful malware variants targeting global users with phishing, RATs, and deceptive apps.

Read More
CTM360 exposes PlayPraetor Trojan campaign using fake Google Play Store pages to spread malware and steal user data.
March 5, 2025

PlayPraetor Trojan Report: Uncovering the Global Scam Campaign

CTM360's PlayPraetor Trojan Report exposes a global scam targeting users of the Google Play Store, with 6,000+ fake pages distributing Trojan malware to steal sensitive user data

Read More
CTM360 identifies overlooked vulnerabilities in ransomware defense with insights on threat vectors and mitigation strategies.
October 9, 2024

Ransomware Blindspots Report: Analysis of Evolving Threat Strategies

Discover ransomware classifications, strategies, and actionable mitigations to strengthen your defenses against evolving cyber threats

Read More
CTM360’s 2023–24 ThreatScape Report highlights global cyber threat trends, attack techniques, and regional risk landscapes
January 11, 2024

2023-24 ThreatScape Report: Analysis of 2023 Global CTI Reports

Explore ThreatScape, an in-depth analysis of global cyber threat trends, uncovering top malware, ransomware, APT groups, and adversary techniques shaping the cybersecurity landscape

Read More
No Reports Found