JAKZ
ShuffleRisingTwo separate high-profile accounts reported the identical scam today: Shuffle affiliates using fake Teams calls and PowerShell prompts to compromise targets — and both attackers had verified affiliate badges.
Zach@CryptoZachLA12d agoTop PostHoly shit such an elaborate scam going around with casino's trying to onboard people. Was talking back and forth with this woman at @shufflecom for a week -her name was @anneliesewillo and somehow is an affiliate??- had prices negotiated and everything, finally decided to get on a Teams call but the teams thing wasn't "working" on her end. Told me I needed to update my teams, but I had JUST downloaded teams. So then she said, "we've been working with clients this week and they seem to have same issue, we found this work around though just put this prompt in and it should automatically download the update" First of all, I come from a big hacker/OpSec background so I knew something was immediately up when she said I needed to update my Teams, because I had JUST downloaded it. Tells me to run this prompt . I throw it into Claude and immediately it's flagged-not that I needed to throw into Claude but I was curious. Immediately blocks me after I call her out. NO Idea how this person has an affiliate badge for @shufflecom but they need to get their shit together.
Zianna@byzianna_12d agoTop Postgm to everyone on a timeline especially to @shufflecom for giving affiliate badges to people trying to casually scam me on telegram a powershell for a @MicrosoftTeams meeting 🤦🏽♀️ let’s do better . https://t.co/dZKy0nWuLS
CryptoZachLA and Zianna independently report Shuffle affiliates running Teams + PowerShell scam
Two unconnected accounts — CryptoZachLA (67k followers, OpSec background) and Zianna (12.2k followers) — both reported being targeted by the same scam today: someone with a verified Shuffle affiliate badge initiates business talks, then directs victims to a fake Microsoft Teams call requiring a PowerShell prompt. CryptoZachLA identified the payload as malicious and called the affiliate out before being blocked. Both are asking how these scammers got affiliate badges.
Holy shit such an elaborate scam going around with casino's trying to onboard people. Was talking back and forth with this woman at @shufflecom for a week -her name was @anneliesewillo and somehow is an affiliate??- had prices negotiated and everything, finally decided to get on a Teams call but the teams thing wasn't "working" on her end. Told me I needed to update my teams, but I had JUST downloaded teams. So then she said, "we've been working with clients this week and they seem to have same issue, we found this work around though just put this prompt in and it should automatically download the update" First of all, I come from a big hacker/OpSec background so I knew something was immediately up when she said I needed to update my Teams, because I had JUST downloaded it. Tells me to run this prompt . I throw it into Claude and immediately it's flagged-not that I needed to throw into Claude but I was curious. Immediately blocks me after I call her out. NO Idea how this person has an affiliate badge for @shufflecom but they need to get their shit together.
gm to everyone on a timeline especially to @shufflecom for giving affiliate badges to people trying to casually scam me on telegram a powershell for a @MicrosoftTeams meeting 🤦🏽♀️ let’s do better . https://t.co/dZKy0nWuLS
CryptoZachLA and Zianna independently report Shuffle affiliates running Teams + PowerShell scam
Two unconnected accounts — CryptoZachLA (67k followers, OpSec background) and Zianna (12.2k followers) — both reported being targeted by the same scam today: someone with a verified Shuffle affiliate badge initiates business talks, then directs victims to a fake Microsoft Teams call requiring a PowerShell prompt. CryptoZachLA identified the payload as malicious and called the affiliate out before being blocked. Both are asking how these scammers got affiliate badges.
Holy shit such an elaborate scam going around with casino's trying to onboard people. Was talking back and forth with this woman at @shufflecom for a week -her name was @anneliesewillo and somehow is an affiliate??- had prices negotiated and everything, finally decided to get on a Teams call but the teams thing wasn't "working" on her end. Told me I needed to update my teams, but I had JUST downloaded teams. So then she said, "we've been working with clients this week and they seem to have same issue, we found this work around though just put this prompt in and it should automatically download the update" First of all, I come from a big hacker/OpSec background so I knew something was immediately up when she said I needed to update my Teams, because I had JUST downloaded it. Tells me to run this prompt . I throw it into Claude and immediately it's flagged-not that I needed to throw into Claude but I was curious. Immediately blocks me after I call her out. NO Idea how this person has an affiliate badge for @shufflecom but they need to get their shit together.
gm to everyone on a timeline especially to @shufflecom for giving affiliate badges to people trying to casually scam me on telegram a powershell for a @MicrosoftTeams meeting 🤦🏽♀️ let’s do better . https://t.co/dZKy0nWuLS