[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjTDIn1xqkPsCZuzud8aMi4Zd35lOclLWTPLUTc44TBI":3},{"article":4,"iocs":55,"watch_terms":60,"solutions":61,"lesson":121},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"b056a043-9e7f-4930-8065-a846dc6e95fd","Hackers Build Fake Polymarket Platforms That Rig Trades and Block Cryptocurrency Withdrawals","hackers-build-fake-polymarket-platforms-that-rig-trades-and-block-cryptocurrency-66b3a3","Criminals are copying the look of Polymarket, one of the biggest prediction market sites. They use the copies to take cryptocurrency from people who think they are placing real bets. Once a victim deposits money, the site decides every win and loss, and withdrawals stop working. The scams are not one-off websites. Three Russian-speaking “traffer” […] The post Hackers Build Fake Polymarket Platforms That Rig Trades and Block Cryptocurrency Withdrawals appeared first on Cyber Security News.","Criminal groups are building sophisticated fake prediction market platforms that mimic legitimate sites like Polymarket to defraud users. These platforms rig trades, prevent withdrawals, and collect personal data. Three Russian-speaking \"traffer\" teams, AtlasCore, PolyFucked, and Magnetic Team, are selling these ready-made scam kits to affiliates, leveraging AI for creating fake influencers and customer support.","Hackers create fake Polymarket platforms to steal cryptocurrency and block withdrawals.","https:\u002F\u002Fcybersecuritynews.com\u002Ffake-polymarket-platforms\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002FHackers-Build-Fake-Polymarket-Platforms-That-Rig-Trades-and-Block-Cryptocurrency-Withdrawals.webp","2026-10-30T14:16:13+00:00","2026-10-30T15:00:13.129763+00:00",8,[17,20,22,25,27,29],{"name":18,"type":19},"Polymarket","product",{"name":21,"type":19},"Kalshi",{"name":23,"type":24},"AtlasCore","threat_actor",{"name":26,"type":24},"PolyFucked",{"name":28,"type":24},"Magnetic Team",{"name":30,"type":31},"AI","technology","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":32,"icon":34,"name":35,"slug":36},null,"Threat Intelligence","threat-intelligence",[38,43,48,53],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"0493c7e9-989a-4692-b4e6-136f5ec09675","Cryptography","cryptography",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":49},{"id":50,"icon":34,"name":51,"slug":52},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":54},{"id":32,"icon":34,"name":35,"slug":36},[56,58,59],{"type":52,"value":23,"context":57},"Threat actor group selling fake prediction market platforms.",{"type":52,"value":26,"context":57},{"type":52,"value":28,"context":57},[18,21],{"controls":62,"vendors":117},[63,91],{"slug":36,"name":64,"problem":65,"products":66},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[67,75,83],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"slug":92,"name":93,"problem":94,"products":95},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[96,102,109],{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":97,"product_name":98,"url":100,"description":101},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":92,"product_name":106,"url":107,"description":108},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",[118],{"slug":68,"name":69,"logo_path":70,"roles":119},[120],"reported_by",{"slug":122,"title":123,"body":124,"framework_refs":125,"framework_notes":133},"fake-polymarket-clones-defraud-users-via-ai-powered-scam-kits","Fake Polymarket Clones Defraud Users via AI-Powered Scam Kits","Criminal groups are selling ready-made scam kits that replicate legitimate prediction market platforms like Polymarket, deceiving users into depositing cryptocurrency that they can never withdraw. These operations combine AI-generated fake influencers, fabricated customer support, and rigged trading mechanics to appear credible while harvesting personal and financial data. The root problem is that users lack the awareness and verification tools to distinguish fraudulent platforms from legitimate ones before engaging financially. This matters because victims suffer direct financial loss and their personal data is collected for potential further exploitation, while the affiliate-distributed scam kit model allows rapid, scalable deployment across multiple threat actors.",[126,127,128,129,130,131,132],"CIS Control 14: Security Awareness and Skills Training","MITRE ATT&CK T1566: Phishing","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","GDPR Article 32","ISO\u002FIEC 27001:2022 Clause 7.2: Competence","NIS2 Article 21(2)(b)","NIST SP 800-53 SI-2: Flaw Remediation",{"GDPR Article 32":134,"NIS2 Article 21(2)(b)":135,"MITRE ATT&CK T1566: Phishing":136,"NIST SP 800-53 SI-2: Flaw Remediation":137,"ISO\u002FIEC 27001:2022 Clause 7.2: Competence":138,"CIS Control 14: Security Awareness and Skills Training":139,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":140},"The fake platforms harvest personal data from victims without lawful basis or appropriate security measures, violating the obligation to process personal data securely — and victims have no recourse because no legitimate data controller exists.","NIS2 requires incident handling and supply chain security measures; the affiliate-distributed scam kit model represents a supply chain of fraud tooling that coordinated threat intelligence and takedown processes under NIS2 obligations could help disrupt.","The fake Polymarket platforms function as a credential and fund harvesting phishing operation, using lookalike sites and AI-generated influencers to lure victims — a direct instance of phishing via spearphishing link.","Legitimate platform operators must proactively identify and remediate brand impersonation and domain spoofing flaws in their public presence — treating fake lookalike sites as a vulnerability requiring rapid response and remediation.","Organisations and individuals operating in cryptocurrency markets must maintain competence in identifying social engineering and brand impersonation threats, which this scam exploited through a knowledge gap.","Users fell victim because they lacked training to identify fake platforms, AI-generated personas, and social engineering tactics used by the scam kits — exactly what a structured security awareness programme addresses.","Legitimate platforms should enforce strong identity verification so users can trust they are interacting with an authenticated service, and users should verify platform identity before submitting funds or personal data."]