Cybercrime kit enables fake Tesla token presale scams

Security researchers from Malwarebytes have identified a “complete scam-in-a-box” being sold for $500 on cybercrime forums. The kit allows individuals with minimal technical expertise to launch fraudulent Tesla ($TSLA) token presales.

The scam targets users on X by presenting a fake investment dashboard that uses the Tesla name and logo. To create a sense of urgency, the phishing site employs countdown clocks, funding bars, and price increase warnings. The kit is designed to deceive users through an “eligibility check” that requests an X username and displays the user's actual profile picture to increase perceived legitimacy.

Victims are targeted through two primary methods: one option offers a bonus for linking a crypto wallet, which then prompts the user for their 12-word recovery phrase to drain the assets; the second option asks for direct transfers of Bitcoin, Ethereum, USDT, or Dogecoin. The kit includes a control panel that enables operators to track victim locations, log usernames, and screen wallets to verify if they contain significant funds before attempting to drain them.