Holiday Crypto Promotion is a threat campaign tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed December 26, 2025; most recent activity December 26, 2025.
Holiday Crypto Promotion is a threat campaign that uses fake GrubHub emails to lure victims into sending cryptocurrency with the promise of a tenfold return. The attack relies on social engineering and brand impersonation, exploiting a holiday-themed premise to create urgency. It poses a financial risk to crypto holders and demonstrates how attackers exploit trusted brands to facilitate crypto theft.
Grubhub users have received fake emails claiming to be from the company, offering a tenfold return on Bitcoin sent to a specified wallet as part of a 'Holiday Crypto Promotion.' The emails were sent from a legitimate…