Tuesday , October 27 2026
CTM360

CTM360 Warns of Rise in Fake High-Yield Investment Scams

CTM360’s new report, BaitTrap, reveals a global scam network using fake news sites called Baiting News Sites (BNS). These sites imitate reliable media brands to facilitate investment fraud, typically sending users to scams like Trap10 and Eclipse Earn.
‍
BNS campaigns target over 17,000 sites in 50 countries using paid ads on platforms like Google and Meta to attract victims to fraud schemes. The report explains how these operations exploit public trust and local familiarity to expand their reach.

Fraudulent High-Yield Investment Programs (HYIPs) are surging globally, pushing “guaranteed” profits that no legitimate investment can sustain. These scams lure victims with a simple pitch: deposit money, wait, and withdraw fast returns, often advertised with exaggerated figures such as “40% return in 72 hours.”

Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw

Cloudflare has shared an urgent update to its Web Application Firewall (WAF) rules due to CVE-2026-111497, a Brotli issue. The release...
Read More
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw

Daily Cyber security update for 26.10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 26.10. 2026

The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours

AI startup Cathedral gained a limited access to internal systems at Anthropic in less than 12 hours, exposing employee information,...
Read More
The Washington Post report  Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours

Daily Cyber security update for 25. 10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 25. 10. 2026

Daily Cyber security update for 24. 10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 24. 10. 2026

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...
Read More
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...
Read More
US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...
Read More
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...
Read More
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

Update now! PHP2Shell: Critical PHP vulnerabilities patched

The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...
Read More
Update now! PHP2Shell: Critical PHP vulnerabilities patched

4,200+ Scam Websites and Hundreds of Monthly Incidents:

Based on data from its WebHunt platform, CTM360 found over 4,200 websites promoting fraudulent HYIP schemes in the past year.

The company reported over 485 incidents in December 2025, with an average of over 15 detections per day, showing ongoing scam activity.

Two Main HYIP Variants Dominating the Campaign

CTM360’s findings highlight two common HYIP formats:

Cryptocurrency trading-based HYIPs that take advantage of interest in digital currencies

Forex and stock trading-based HYIPs are designed to look like legitimate market platforms

Both types use the same main trick: attractive designs and fake performance claims to get deposits instead of making profits.

Read the full report here: https://www.ctm360.com/reports/hyip-risk

Check Also

Qwen

Claude, DeepSeek, and Qwen AI agents combinedly used to hit gov.t across Asia

Chinese-speaking hackers have added Claude, Qwen, and DeepSeek to their hacking system to automate cyberattacks …