Malwarebytes Uncovers $500 Tesla Token Scam Kits Targeting Wallets

Cybersecurity firm Malwarebytes identified $500 scam kits enabling fake TSLA token pre-sales. Operators use real-time wallet filtering and social engineering to steal funds via recovery phrases or direct transfers.

Woofun AI reports that cybersecurity firm Malwarebytes discovered a user on an online crime forum selling "scam kits" for $500. These tools enable operators with minimal technical expertise to create fraudulent pre-sale websites for $TSLA tokens, impersonating Tesla. The scam process requires visitors to input their X Corp usernames, which the system uses to display their actual profile pictures, creating a false sense of targeted invitation. Countdown timers and price increase warnings are employed to induce urgency.

Victims selecting the "15% reward via wallet link" option are prompted to enter their 12-word recovery phrase, leading to immediate wallet drainage. Those choosing to "invest" directly must send encrypted assets to scammer-controlled addresses, after which they view fabricated balances on a fraudulent dashboard. The kits' control panel allows operators to track victims in real time, collect recovery phrases, and check wallet balances beforehand to determine scam viability. Malwarebytes identified this tool on May 16, noting that IRS employees and Ledger users have recently fallen victim to similar phishing attacks.