An Unfortunate Investor Loses Millions in a Crypto Phishing Scam
Imagine being an unfortunate cryptocurrency investor who has recently fallen victim to a devastating crypto phishing scam, resulting in the loss of millions of dollars. This incident is considered one of the largest phishing attacks in recent history, and it serves as a harsh reminder of the dangers lurking in the crypto world.
Crypto Phishing Attack Drains $24M in Tokens
Just a few hours ago, reports surfaced about a massive phishing attack that drained a staggering $24.23 million worth of stETH and rETH tokens. PeckShield, a reliable source in the blockchain security industry, revealed that the victim lost 9,579 stETH and 4,851 rETH tokens, which are associated with Lido and Rocket Pool respectively.
Apparently, the victim unknowingly gave the scammer permission to access their tokens through “increaseAllowance” transactions. It’s worth mentioning that the attacker’s address had been previously flagged and linked to various crypto phishing websites. Additionally, PeckShield reported that the stolen funds were already being transferred.
The attacker converted the stolen tokens into approximately 13,785 ETH, valued at around $22.5 million, and 1.64 million DAI. One of the platforms involved in the transfer is FixedFloat, an automated cryptocurrency exchange that operates through the Lightning Network.
Phishing Scams: Deception and Risk
Phishing is a deceptive technique used by cybercriminals to trick individuals into divulging sensitive information or installing harmful software like ransomware. It’s alarming to note that these malicious links have even made their way onto reputable platforms like Google’s advertisements, putting users at significant risk.
Furthermore, another crypto scam involving Google resulted in a potential loss of nearly $900,000 for an unsuspecting victim. This incident sheds light on the prevalence and sophistication of these scams in the crypto space.
Earlier this year, BeInCrypto reported on two phishing attacks where scammers managed to steal 675,000 USDT and seven NFTs, underscoring the urgent need for vigilance and awareness.
New Threat Actor Detected: W3LL Phishing Kit
In a separate development, cybersecurity firm Group-IB recently issued a warning about a significant phishing threat called “W3LL.” This threat actor operates a concealed underground market that sells tools capable of bypassing Microsoft 365 multifactor authentication.
The custom phishing kit known as the “W3LL Panel” specifically targets corporate Microsoft 365 accounts. Disturbingly, it is estimated that over 56,000 accounts were compromised between October 2022 and July 2023, highlighting the severity of the threat.
Experts are concerned that these tools signify a new era of highly sophisticated “adversary-in-the-middle” phishing attacks, designed to evade multifactor authentication systems, making them extremely challenging to detect.
Hot Take:
It’s crucial for you, as a crypto enthusiast, to stay informed about the latest scams and phishing techniques. By staying vigilant and adopting robust security measures, you can protect yourself from falling victim to these malicious actors. Remember, the crypto world can be a treacherous place, but with knowledge and caution, you can navigate it safely.
By
By
By
By
