Phishing Scammers Clone Crypto Websites to Steal Wallets
Phishing scammers have created clone websites of popular crypto media outlet Blockworks and Ethereum blockchain scanner Etherscan in an attempt to deceive unsuspecting readers and drain their wallets.
The fake Blockworks website features a fabricated “BREAKING” news report about a supposed multimillion-dollar “approvals exploit” on decentralized exchange Uniswap. It then directs users to a fake Etherscan website, urging them to rescind approvals.
Several compromised Reddit accounts posted the fake Uniswap news article across various crypto-related subreddits.
The fraudulent Etherscan website appears to offer a token and smart contract approval checker but instead contains a wallet drainer.
Age Check Reveals Recent Domain Registrations
An examination of the domains reveals that the fake Etherscan site, approvalscan.io, was registered on October 25. The counterfeit Blockworks site, blockworks.media, was registered a day later.
On October 25, Web3 anti-scam platform Scam Sniffer exposed scammers who had deployed a wallet drainer on a website imitating the crypto news outlet Decrypt.
Hot Take: Protect Yourself from Phishing Attacks
Phishing attacks are becoming increasingly prevalent in the crypto space. To protect yourself from falling victim to such scams, it is crucial to exercise caution when visiting unfamiliar websites or clicking on suspicious links. Be wary of unsolicited messages or emails that ask for your personal information or wallet details.
Always verify the authenticity of a website by double-checking the URL and ensuring it is secure (look for the padlock symbol). Additionally, keep your devices and software up to date with the latest security patches to minimize vulnerabilities.
Remember, your security is in your hands. Stay vigilant and stay safe in the crypto world.