Binance co-founder Changpeng Zhao (CZ) warned about a malicious crypto phishing scheme that uses a fake Trust Wallet website to lure unsuspecting users into connecting their wallets.
CZ shared a warning about a fraudulent website with a fake domain that mimics the popular Trust Wallet website.
Attackers modified the website domain by replacing the “u” with “a” and changing the extension from “.com” to “.cam,” which may trick unsuspecting users who don’t carefully inspect the domain.
HOT Stories Binance's CZ Sounds Alarm Over New Crypto Phishing Scam Solana (SOL), Ethereum (ETH), Near Protocol (NEAR) and Zcash (ZEC) Price Analysis For November 5: Crypto Market's Chance to Turn Bullish Again
The malicious website tricks users into connecting their crypto wallets in order to review their transfers.
However, the site contains JavaScript code that attempts to scan wallet balances using a backend API in order to prepare transfers to specific wallet addresses.
The attacker’s setup works with multiple well-known crypto wallets such as Trust Wallet, Phantom, and OKX Wallet.
Similar Trust Wallet phishing schemes spotted
CZ’s warning comes shortly after a surge in crypto phishing attempts against wallet users.
On Nov. 3, cybersecurity firm Bitdefender announced that scammers had started using the recent Binance security breach to spread fake emails impersonating Trust Wallet.
The phishing emails suggested that Trust Wallet users were also impacted by the Binance security breach. Therefore, they instructed users to perform a mandatory wallet verification procedure.
The email messages warned that users would be suspended after Nov. 7 if they did not complete the wallet verification process.
Bitdefender said that the phishing scheme affected users in multiple countries, including the United States, United Kingdom, Australia, Ireland and South Africa.
The phishing messages led users to fake verification websites where their wallet credentials or recovery data could be leaked.
Earlier this year, cybersecurity analysts from CYFIRMA spotted another phishing attack against Trust Wallet users. The attackers used malicious QR codes on Telegram to target Trust Wallet users.
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到[email protected]，本平台相关工作人员将会进行核查。
