Emilio Casbas

Cybersecurity at Switzerland's largest bank / Tracking fraudulent webs: @desenmascarame side project. Tweets are my own (hopefully).

[Emilio Casbas @ecasbas]

Buena epoca para resaltar este tipo de fraude online

[C. Otto @ottoreuss]

El cazador de estafadores: este español ha destapado 20.000 webs que roban tu dinero con una estafa que ningún cuerpo policial es capaz de detectar de manera automática https://t.co/vwBb7LjEnV

[Emilio Casbas @ecasbas]

@patowc @javipas @n26 estan haciendo una gran apuesta en España parece. @Wise tiene cuenta de empresa y sin problema unos años que estuve con ellos.

[Emilio Casbas @ecasbas]

@movistar para que actueis rapido antes de que caigan mas victmas

[desenmascara.me @desenmascarame]

🚨 FRAUDE detectado suplantando a Movistar via SMS

🌐 Web falsa: profacmarmvt. de
Simula el pago de facturas y solicita tarjeta + CVV
⚠️ Riesgo alto (75/100) según @desenmascarame

❌ Nunca introduzcas datos en webs no oficiales
✅ Usa solo la app oficial o @Movistar official
🔎 Análisis completo:
https://t.co/kOWIZv24iS⁠

🔁 Comparte y protege a tu gente
#Phishing #Fraude #Ciberseguridad #Movistar

[desenmascara.me @desenmascarame]

Never been a better time to work in tech. Ideas aren’t the bottleneck anymore — execution is. You can build now. Welcome to agentic engineering.

[desenmascara.me @desenmascarame]

Shipping a new feature on @desenmascara_me: Regulatory Warning enrichment.

We ingest public alerts from financial authorities (@FINMA_media , @CNMV_MEDIOS , @TheFCA ) and attach them to domain reports as high-confidence evidence.

Those confirmed alerts also become feedback loops — improving detection of lookalike sites and early scam infrastructure likely to trigger future warnings.

[desenmascara.me @desenmascarame]

🇪🇸 @GDTGuardiaCivil — https://t.co/CgTCNAT5do lleva años destapando webs de fraude.

La diferencia es que ahora la tecnología permite escalarlo: IA + señales técnicas + evidencia visual para dar visibilidad y, sobre todo, evitar que la ciudadanía caiga antes de pagar o dar datos (porque “tumbar” muchas veces es lo más difícil).

Caso de hoy: (en la imagen) → señales de riesgo + aviso ciudadano (“fraude, denunciado a la GC”).

El fraude es global, pero podemos empezar a frenarlo desde España: visibilidad, alerta temprana y prevención. Juntos.

¿Hablamos para colaborar (feed/API + reporting estructurado) orientado a protección al consumidor?

#Ciberseguridad #FraudeOnline #Estafas #ProteccionCiudadana #MadeInSpain

[Emilio Casbas @ecasbas]

Scam farms at this scale need coordinated action powered by shared signals and user-submitted data. @apwg_eu @Europol

[desenmascara.me @desenmascarame]

48h. 1 single IP behind Cloudflare.
905 ACTIVE fraudulent domains.
349 brands abused.

Some IPs appear to generate ~200 new scam domains/day for months.

This isn’t “a few bad sites”. It’s industrial-scale fraud.

The playbook is repeatable: fake stores with impossible discounts, endless stock, synthetic urgency, and domains on rotation. People buy, pay… and the site disappears.

Top brands/themes in this 48h snapshot include:
Shop, Lidl, Adidas, HexClad, Helly Hansen, Nike, XFINITY, Garmin, Huda Beauty, Philips (full list attached).

The “Shop” label topping the list isn’t random. It suggests a factory model: not just brand impersonation, but mass-produced “legit-looking” ecommerce fronts.

The uncomfortable takeaway: our ecosystem still reacts too late. We can’t keep shifting the burden to users with “be careful.”

https://t.co/CgTCNASxnQ is tracking these fraud farms and clustering repeatable infrastructure patterns that enable rapid detection and disruption.

If you’re an anti-fraud leader, platform, or strategic buyer looking to operationalize this at scale, I’m open to collaboration or strategic discussions. DM me.
@QuestTechGlobal @BforeAI @Cloudflare

This isn’t just “cyber.”
It’s SCAM-driven consumer trust at scale—and it’s on fire.

[Emilio Casbas @ecasbas]

Comet 3I/ATLAS – frequently asked questions
https://t.co/bVUit9vJ7Y

[Emilio Casbas @ecasbas]

Migrating to post-quantum cryptography a must-read paper by @Mastercard

2 days later this news broke - "A truly remarkable breakthrough’: Google’s new quantum chip achieves accuracy milestone" https://t.co/FsclUVQkTE

Not longer a distant dream - better be prepared

[desenmascara.me @desenmascarame]

@sama this might quietly solve a $150 B/year problem: online scams

(Source: Aspen Institute – https://t.co/gMZnK1MjB2)

With Atlas identifying fake e-commerce & brand-impersonation sites in real time (see examples 👇), you may have just built the most powerful anti-fraud weapon ever released to the public.

— someone researching on this niche problem for years

[Emilio Casbas @ecasbas]

Solo se trata de concienciar para evitar mas víctimas de un problema que afecta a nuestra sociedad.

La tecnologia ya esta. 👇

[desenmascara.me @desenmascarame]

🇨🇭 New feature live 🚨

https://t.co/s8x50Bfy5I now checks @FINMA_media regulatory warnings to flag unauthorized financial services.

First example: In the picture — listed by FINMA as unauthorized.

Smart finance? Not this one.🔍
#CyberSecurityAwarenessMonth #Fintech

[Reuters @Reuters]

US sanctions billion-dollar cyber scam networks in Myanmar and Cambodia https://t.co/JEsWr9YqRh https://t.co/JEsWr9YqRh

[Emilio Casbas @ecasbas]

It's been a fascinating path so far. Exciting times! https://t.co/3JymALqXF1

[desenmascara.me @desenmascarame]

🚨 BUSTED: FAKE store alert 🚨

Our AI just flagged this site as FRAUDULENT ❌

🕵️ Fraud type: Fake Store
🎯 Impersonated brand: @sun68

No more vague warnings — https://t.co/MtMFduWGCj now identifies both the scam type and the targeted brand.

👉 Protect yourself:

[desenmascara.me @desenmascarame]

🚨 Fake WGU login site flagged:
❌ Not the official domain
✅ Thanks to improved AI signals, https://t.co/s8x50Bg5Vg detects scams that others miss.
From fake universities to crypto & e-shops — we stop what others don't.
#AIsecurity #cyberfraud #phishing #wgu #desenmascara

[desenmascara.me @desenmascarame]

🚨 Detectado sitio fraudulento: en la imagen
🕵️‍♂️ Se hace pasar por "Pago PSE | Mundial"

✅ Gracias a mejoras en IA, https://t.co/s8x50Bg5Vg detecta lo que otros no.
#fraude #phishing #IA #Pagos #desenmascara

[Rajvardhan Oak @oak_raj]

Thank you @desenmascarame and @ecasbas for sharing our work !

[Tom Warren @tomwarren]

Bill Gates and Linus Torvalds have met for the first time ever, at a dinner hosted by Sysinternals creator Mark Russinovich. Dave Cutler, Microsoft technical fellow and Windows NT lead developer, also met Linus for the first time https://t.co/T8cd5lkbcc

[Emilio Casbas @ecasbas]

No malgastes tu preciado tiempo en algo que tendrian que solucionar con tech. Contenido promocionado que lleva a webs de dudosa reputacion...

Ya han pagado, que es lo que importa, si despues se reportan, pues igual actuamos..

[Román Ramírez @patowc]

@EnemigoAnonimo_ Anteayer denuncié a una cuenta fingiendo ser @rtve... me han entrado como veinte de estos en tres días...

[desenmascara.me @desenmascarame]

En breve.... proxima version de https://t.co/s8x50Bfy5I

[Emilio Casbas @ecasbas]

The cost of a data breach with less than 1% of Coinbase's users?

"estimated expenses to be within the range of approximately $180 million to $400 million relating to remediation costs and voluntary customer reimbursements"

https://t.co/Pj8VqT08vU

[Emilio Casbas @ecasbas]

El mejor uso que le doy a Twitter últimamente: saltarme los chatbots inútiles y las eternas esperas en soporte. 🚀💨