Phishing Attack Involving Fake Skype App to Steal Crypto Funds
A new phishing attack has been revealed by blockchain security firm SlowMist, which involves a fake Skype app designed to steal crypto funds from unsuspecting victims. The victim in this case had downloaded what he believed to be the Skype app from the internet and subsequently had his funds stolen. This incident highlights the vulnerability that users face, particularly in regions like China where official app stores are not available, leading users to resort to direct downloads from the internet.
According to SlowMist’s report, due to the inaccessibility of Google Play in China, many users turn to downloading apps directly from the internet. However, fake apps are not limited to wallets and exchanges but also extend to social media applications like Telegram, WhatsApp, and Skype.
How the Fake App Stole Crypto Funds
The fake Skype app masquerades as the legitimate video chat tool and is injected with malicious code that monitors and uploads files and images from users’ devices in an attempt to capture sensitive information. Users are less likely to suspect this activity since apps like Skype are commonly used for file transfers and calls, allowing attackers to obtain user permissions to upload files, device information, user IDs, and phone numbers.
Specifically, the fake Skype app monitors incoming and outgoing messages for Ethereum or Tron blockchain addresses. If detected, these addresses are replaced with malicious addresses by the attackers in an effort to redirect payments to themselves instead.
The Binance Fake App Connection
It is noteworthy that the phishing domain linked to the app initially impersonated the crypto exchange Binance before switching to mimic Skype’s backend. This indicates a general focus on the lucrative web3 sector by the group behind these attacks. SlowMist recommends that users use official app download channels only and enhance their security awareness to mitigate the risk of falling victim to such phishing attacks.
Hot Take: Protect Yourself Against Phishing Attacks
The recent phishing attack involving a fake Skype app serves as a reminder of the constant threats faced by cryptocurrency users. To protect yourself against such attacks, it is crucial to exercise caution when downloading apps and only use official channels for app downloads. Additionally, staying informed about potential threats and being vigilant about suspicious activities can help safeguard your crypto assets from falling into the hands of malicious actors.
By
By
By
By
By