seguridadsocialnoticias[.]com

This domain, seguridadsocialnoticias.com, poses as a distribution point for a fraudulent gaming application under the name Polagacor168, offering fake APK downloads labeled as official and free. The site mimics legitimate gaming platforms to deceive users into installing malicious software, which may lead to credential theft, device compromise, or unauthorized financial transactions. The content is presented in Indonesian, targeting users searching for gaming applications, particularly slot games, with promises of free access and official status to lower user defenses. Analysis indicates the domain is flagged by 19 out of 95 security vendors on VirusTotal, signaling broad recognition of its malicious intent. It was registered through Gname.com Pte. Ltd. on May 19, 2026, an anomalous creation date suggesting potential domain spoofing or backdating. The domain resolves to a Cloudflare IP (172.67.171.52) and appears on at least one security blocklist. The SSL certificate is issued by Google Trust Services, which, while legitimate, is commonly exploited by threat actors to lend false credibility to malicious sites. Users who visited seguridadsocialnoticias.com or downloaded the advertised APK should immediately disconnect the device from networks and perform a full antivirus scan. Any credentials entered on the site or associated applications must be changed from a secure device. Monitor financial accounts for unauthorized transactions, as the malware may include data exfiltration capabilities. Report the incident to local cybersecurity authorities and consider a factory reset if the APK was installed, as some malware persists across reboots.