MercuryTeam

Operation Summary

MercuryTeam disguises scam operations as affiliate opportunities. Victims are recruited via bots, assigned to "branches," and used to spread phishing sites. The group runs a fake crypto exchange and a scam casino through Telegram bots with a recruiter-driven "mentor" model.