IT company F6 warned about fake sites with surveys and theft of Telegram data

Brief retelling from RIA II

IT company F6 reported the emergence of fake websites offering to take an alleged election survey for a prize.

When trying to register, users are faced with a request to log in through Telegram, which can lead to data theft.

Experts recommend not following links from unreliable sources and not providing personal information on dubious resources.

MOSCOW, September 17 - RIA Novosti. The scammers offer Russians to take an alleged election survey for a prize, and to register on the site they ask to log in via Telegram, which threatens the theft of user data, IT company F6 told RIA Novosti.

Elections of deputies to the State Duma of the ninth convocation will take place in September. Voting will take place from September 18 to 20. Russian President Vladimir Putin called the upcoming elections to the State Duma the most important domestic political event in the country.

“On the eve of the elections, F6 analysts recorded the emergence of fake election-related websites. One of these sites was created on behalf of the non-existent organization “Independent Center for Social Research” and offers to take an “independent anonymous survey.” Users are promised that “each participant can win a prize,” the message says.

It is noted that when going to the site, the user is asked to log in via Telegram, to do this, indicate the name and phone number associated with the messenger account, and then click the “Get code” button. However, after entering the data, nothing happens: the site displays a message that an error occurred while sending the code.

F6 specialists indicate two probable reasons for this behavior of the site: it could be a technical error by scammers who planned to steal Telegram user accounts using the site, or the attackers are thus collecting visitor data for use in other cybercriminal schemes.

The company clarified that dangerous sites are registered in the .help and .me domain zones and use the words “vybory” and “izbiratelnaya-komissiya” in their names. The first site was created on September 3, 2026, the second on September 15. Soon after these sites were discovered, access to them in Russia was blocked.

F6 analysts do not rule out that attackers may create new domains to host such dangerous sites.