Loading story…
Recent survey findings indicate cyber-enabled fraud is increasingly affecting small organizations and workers, with measurable business impact. The Identity Theft Resource Center reported that 80% of small businesses experienced a cyberscam or breach in the prior 12 months, and 38% of impacted firms said they passed losses to customers by raising prices; the report also noted that a significant portion of these scams were AI-fueled, and that repeat victimization (multiple breaches within a year) was common.
Separately, a TransUnion study of U.S. gig workers found fraud is routine on gig platforms, with 34% of respondents reporting they had been defrauded by consumers through issues such as payment disputes, chargebacks, and “tip baiting.” The study also highlighted security and trust risks created by worker responses to fraud, including participation in prohibited practices like account renting/selling, and pointed to demand for stronger platform controls such as identity verification, address validation, and enforcement against repeat offenders—underscoring gaps between deployed safety features and user confidence in protections.
Get the infrastructure and lures behind it.
3 events from the most recent confirmed update back to the earliest known activity.
Follow-on reporting on the same ITRC survey said 41% of small-business victims in 2025 attributed a recent attack's root cause to AI, indicating a sharp rise in AI-enabled cybercrime compared with 2024. The report also noted declining MFA adoption, large per-incident losses, and growing difficulty obtaining cyber insurance after breaches.
An Identity Theft Resource Center survey reported that four in five small businesses experienced a cyberscam or security/data breach during 2025, with many suffering multiple incidents. The survey found that 38% of affected businesses raised prices to offset losses, showing direct economic impact on customers.
A TransUnion study published in January 2026 reported widespread fraud and abuse affecting U.S. gig workers, including payment disputes, chargebacks, tip baiting, fake users, and fake listings. The study also found that account renting and selling were commonly observed, allowing unverified individuals to bypass background checks and weakening platform trust and attribution.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
3 references tracked. Mallory keeps watching after this page renders.
techxplore.com
Open sourcedatabreaches.net
Open sourcehelpnetsecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Business leaders are increasingly prioritizing **cyber-enabled fraud** over ransomware as their top cybersecurity concern, according to the World Economic Forum (WEF) *Global Cybersecurity Outlook 2026* released ahead of the Davos annual meeting. Reported high-frequency fraud vectors include **phishing** (including **SMS smishing** and **voice vishing**), followed by invoice/payment fraud, identity theft, and insider-driven abuse. The report frames cyber risk as a strategic and societal issue requiring coordinated action and leadership beyond purely technical controls. WEF also warns that **AI is accelerating cybersecurity risk**, with surveyed respondents reporting mounting AI-related vulnerabilities and expecting AI to significantly reshape the security landscape in the near term. Separate content from CSO Online focused on application security tooling and industry features/podcasts does not provide substantive details tied to the WEF report and appears to be navigational/aggregated content rather than reporting on the same specific outlook findings.
Jun 29, 2026
Researchers and industry reporting highlighted a sharp rise in **online scam infrastructure**, including a network of more than **20,000 fake shopping sites** built to steal payment data and personal information, and phishing campaigns that use **LiveChat-style customer support impersonation** to extract credit card details, PII, and even MFA codes. The fake-shop ecosystem uses polished storefronts, shared infrastructure, and rapid rebranding to mimic legitimate retailers at industrial scale, while the LiveChat campaigns begin with deceptive emails and move victims into real-time conversations with fake support agents posing as brands such as *Amazon* and *PayPal*. Separately, **Google, Meta, Amazon, and other companies** announced a voluntary intelligence-sharing pact to combat online scams across social media, marketplaces, messaging, and payments platforms. That agreement is related to the broader rise in fraud, but it is not about the same specific scam operations described in the threat reports. The combined reporting shows that scam activity is increasingly coordinated, multi-platform, and enabled by reusable infrastructure and social engineering techniques that make fraudulent interactions appear legitimate to victims.
Jun 29, 2026
Job-related scams have experienced a dramatic increase, with research from McAfee indicating a surge of over 1,000% between May and July 2025. Job seekers are particularly vulnerable, as they are more likely to receive unsolicited messages and may overlook warning signs, making them prime targets for scammers. These scams often involve fraudulent recruiters who lead with enticing benefit details or request sensitive personal information early in the communication process. In addition to job scams, there has been a significant rise in text message-based phishing attacks, known as smishing, which disproportionately target younger Americans aged 18 to 29. According to a report by Consumer Reports, Aspen Digital, and the Global Cyber Alliance, 30% of individuals who experienced a cyberattack or scam in the past year reported that it began via text message or messaging app, up from 20% the previous year. Phishing remains the most prevalent type of scam, with 39% of victims reporting that the attack involved messages or emails impersonating legitimate sources to solicit personal information. Nearly half of American consumers have encountered a cyberattack or digital scam, and about 1 in 10 Americans overall have lost money as a result. Scammers are systematically targeting essential aspects of modern life, including job hunting, online shopping, financial management, and technology adoption. The success of these scams often relies on exploiting victims' emotions, urgency, and distraction, rather than technical sophistication. Security experts emphasize the importance of awareness and education as critical defenses against social engineering attacks. Best practices such as using strong passwords, enabling multi-factor authentication, and verifying communications through official channels are recommended to mitigate risk. AI-powered security awareness training is highlighted as an effective tool for organizations to reduce human risk and strengthen security culture. The reports stress that collective action is necessary, involving individuals making safer choices, industry developing more secure products, and governments holding cybercriminals accountable. The dramatic increase in scams underscores the need for ongoing vigilance and proactive security measures. Both job seekers and younger demographics are urged to be especially cautious when responding to unsolicited messages or offers. The data suggests that as digital communication channels proliferate, so too do the opportunities for scammers to exploit unsuspecting users. Security vendors and advocacy groups continue to provide guidance and resources to help the public recognize and avoid these evolving threats. The overall trend points to a rapidly escalating threat landscape that requires coordinated efforts from all stakeholders to address effectively.
Jun 29, 2026