Cybercriminals in Russia are using fake Polymarket websites and AI influencers to steal cryptocurrency, according to research from Recorded Future’s Insikt Group This article explores crypto fraudulent websites. . Since spring 2026, researchers have identified three teams: AtlasCore, PolyFucked, and Magnetic Team, which offer pre-made fraud platforms that mimic Polymarket and Kalshi.
These operations include convincing trading interfaces, cryptocurrency payments, administrative dashboards, and automated victim support. Polymarket Impersonators Steal Crypto The fraudulent websites mimic familiar prediction-market features, including YES/NO outcomes, probability charts, trading volumes, and user comments.
Required information includes card security codes, passports, identification cards, and selfies, adding additional exposure to cryptocurrency losses. The Magnetic Team's PredictON platform employs a configurable withdrawal funnel with fabricated obstacles, such as identity checks, anti-money-laundering reviews, upgrade fees, and withdrawal taxes. Their bots mimic various trading styles, including high-frequency trading, which typically relies on algorithms to execute large orders quickly.
These fictional influencers appear in realistic images and reaction videos tied to trending news, geopolitical developments, and potential trading profits.
Indicators of Compromise Threat team Domain / subdomain Reported role AtlasCore atlascore-panel[. ]net Main affiliate administration panel AtlasCore polymarket[.]atlascore-panel[. ]net Prediction-market administration panel and observed WebSocket endpoint
