On February 11, 2025, Unit42 researchers Shu Wang, Daiping Liu, and Fan Fei published a timely threat intelligence report highlighting a surge in newly registered domains (NRDs) tied to sports-themed cryptocurrency scams.
These domains were identified in the two weeks leading up to the 2025 Super Bowl, a period often exploited by cybercriminals due to heightened public interest and online activity.
The report revealed that scammers are leveraging fraudulent meme coins and pump-and-dump crypto schemes to exploit unsuspecting victims.
By using sports-themed branding, celebrity imagery, misleading tokenomics, and aggressive marketing tactics, these scams aim to lure individuals into investing in worthless or fraudulent cryptocurrencies.
The primary tools employed by these malicious actors include:
To protect against such scams, individuals should:
Unit42’s timely threat intel underscores the importance of vigilance during major events like the Super Bowl.
By identifying and exposing these fraudulent domains early, cybersecurity experts can help mitigate risks and protect potential victims from falling prey to crypto scams.
PatchWerk is a proof-of-concept (PoC) tool designed to clean NTDLL syscall stubs by patching syscall…
Network fingerprinting is a critical technique for identifying and analyzing network traffic patterns, particularly in…
"HowToHunt" is a platform designed to assist hunters in improving their skills, planning their expeditions,…
SkyFall-Pack is an advanced infrastructure automation toolkit designed for Command and Control (C2) operations. It…
LummaC2 is a commodity malware designed as an information stealer, targeting browsers, cryptocurrency wallets, and…
RustOwl is an innovative tool designed to enhance the Rust programming experience by visualizing ownership…