#ParsedReport #CompletenessLow
15-09-2026

Search results are sending people to fake Bitrefill checkouts

https://www.malwarebytes.com/blog/threat-intel/2026/09/search-results-are-sending-people-to-fake-bitrefill-checkouts

Report completeness: Low

Victims:
Bitrefill, Cryptocurrency users

ChatGPT TTPs:
do not use without manual check
T1036, T1204.001, T1657

IOCs:
Domain: 27
IP: 0
Url: 0
Hash: 0
Email: 0
BrowserExtension: 0

Soft:
Android

Crypto:
bitcoin, ethereum, solana, litecoin

Platforms:
apple