A cybercrime forum seller is offering a $500 scam kit that lets low-skill criminals spin up a fake $TSLA token presale using Tesla branding and social-engineering tactics designed to steal crypto. Malwarebytes said it found the package on May 16 and described it as a complete fraud bundle, with hosting, phishing pages, a fake investment dashboard and tools to track victims. The site presents the offer as an exclusive early sale for X users, asks for an X username for an "eligibility check," then displays the account's real profile picture to make the pitch look personalized. It also uses classic urgency prompts such as a filling funding bar, a countdown timer and warnings of an imminent price increase to create FOMO (fear of missing out). Victims are steered either to link a wallet for a claimed 15% bonus and then hand over a 12-word recovery phrase, or to send crypto assets directly to an address controlled by the scam operator, after which a fake dashboard shows a fabricated balance. The back end lets the operator monitor site activity, collect recovery phrases and check wallet balances in advance to decide whether a target is worth pursuing. The report fits a broader pattern of crypto phishing, with recent attacks also targeting IRS and Ledger users.