Source-provided description · Unverified
Onion Blog is a plain-text, no-JavaScript reader on privacy, digital self-defense and how modern online scams actually work — written for the Tor community.
Inspect onion link →Indexed pages
Off-the-shelf phishing kits can clone any login page in minutes and relay your credentials in real time, even past two-factor codes. Here is how they work.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Scammers impersonating deployed U.S. service members have defrauded victims for over a decade using a scarily consistent script. Here is how the deception works.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Sometimes the malware doesn't come through a phishing link at all — it comes bundled inside software you already trust and updated automatically. Here is how that keeps happening.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Onion Blog is a plain-text, no-JavaScript reader on privacy, digital self-defense and how modern online scams actually work — written for the Tor community.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Tor anonymizes your connection, not your behavior. Here is how deanonymization actually happened in two of the most cited cases in security research — a bomb threat and a hacked hidden service.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Most social media account takeovers use a handful of repeatable tricks: phishing, OAuth abuse, SIM swaps and stolen sessions — including the ones behind 2020's mass Twitter hijack.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →"Bank logs" are stolen online-banking credentials traded like commodities on criminal forums. Here is where they come from and the marketplace that got taken down for selling them.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Ransomware rarely breaks in through some exotic hack — it walks through the front door via phishing and weak remote access. Here is the typical chain, end to end.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Unlicensed online casinos can make the house-edge math irrelevant by simply not paying out. Here is how these operations are built, and the insider cheating scandal that exposed one of the biggest.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →When attackers take over a verified X account, they don't need to convince anyone of anything — the blue checkmark already did that. Here is how hijacked accounts get used to launch and pump crypto tokens.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →A blaring browser pop-up, a fake virus warning, a phone number to call — this scam has run for over a decade and still nets scammers billions from victims worldwide.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Scammers copy real listings, undercut the price, and collect a deposit before a single showing happens. Here is how rental scams are built and why they keep working in tight housing markets.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →A slick ad, a countdown timer, a too-good discount — and a store that vanishes after your card is charged. Here is how a fake-store network called BogusBazaar ran tens of thousands of scam sites at once.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Fake remote job offers on WhatsApp and Telegram lure victims into "product-boosting" tasks that require depositing their own money first. Here is how the task-scam economy operates.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Every major disaster brings a wave of fake charity solicitations. Here is how they are built to look legitimate, and the case that shut down four "cancer charities" that raised $187 million.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Doxxing rarely involves hacking at all — it is built from public records, metadata and old posts stitched together. Here is how the pieces get connected, and where it can lead.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →A trending token, a locked liquidity pool that isn't really locked, and a developer who vanishes overnight. Here is how rug pulls have drained billions from investors.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →A few seconds of audio is enough to clone a voice convincingly. Here is how AI-generated voice scams have already fooled a UK energy firm out of $243,000.
Last crawled: 19 Sep 2026 11:27 UTCScreenshot queued · Request priority →Cryptojacking doesn't steal your files or lock your screen — it just quietly steals your electricity and processing power. Here is how it spread through browsers, servers and even Tesla's cloud.
Last crawled: 19 Sep 2026 11:26 UTCScreenshot queued · Request priority →Wallet drainers trick you into signing away your funds. We explain how drainer kits work and unpack the $230M Malone Lam theft, one of the largest single-victim crypto thefts on record.
Last crawled: 19 Sep 2026 11:26 UTCScreenshot queued · Request priority →From overlay skimmers to shimmers thin enough to hide inside the card slot, here is how physical card fraud devices work and how these rings typically get taken down.
Last crawled: 19 Sep 2026 11:26 UTCScreenshot queued · Request priority →No malware, no exploit — just a convincing email at the right moment. BEC scams have cost companies like Facebook and Google over $100M each. Here is how they work.
Last crawled: 19 Sep 2026 11:26 UTCScreenshot queued · Request priority →Some of the most damaging breaches never involve breaking through a firewall — they involve paying someone who already has the door key. Here is how bribed contractors leaked Coinbase customer data.
Last crawled: 19 Sep 2026 11:26 UTCView screenshot archive →Two of the most damaging breaches of U.S. government networks didn't start with a dramatic hack — one rode in through a routine software update, the other through stolen background-check files. Here is how both happened.
Last crawled: 19 Sep 2026 11:26 UTCView screenshot archive →Onion Blog is a plain-text, no-JavaScript reader on privacy, digital self-defense and how modern online scams actually work — written for the Tor community.
Last crawled: 19 Sep 2026 11:26 UTCView screenshot archive →
Archived screenshots
Previews are blurred. Select an image and accept its content warning to reveal it. Tor is not required.
Observed outgoing links
No outgoing links observed yet.