A deceptive Skype application circulating in China has led to a phishing scam, resulting in cryptocurrency theft, warns SlowMist, a leading blockchain security firm.
Pictures taken from SlowMist:
The scheme, discovered after a victim reported funds being stolen post downloading the fake Skype app, has been linked to a previous phishing incident impersonating Binance.
The counterfeit Skype app, displaying a likely Chinese origin, differs from the official release.
Upon decompiling the app, the security team uncovered a modification to the widely used Android network framework, "okhttp3," designed to target cryptocurrency users.
While the default okhttp3 framework typically manages Android traffic requests, the adapted version goes beyond, retrieving images from diverse directories on the phone and actively monitoring for any newly added images in real-time.ata.
Once granted permissions, the application uploads sensitive information like images, device details, user ID, and phone numbers to a phishing backend.
The investigation uncovers a connection to a prior phishing attempt involving the same criminal group.
The backend domain, 'bn-download3.com,' originally posed as Binance on 23 November 2022.
These apps tamper with network traffic to replace legitimate cryptocurrency wallet addresses with those controlled by the attackers.
SlowMist's analysis reveals substantial financial losses, with a TRON chain address receiving 192,856 USDT through 110 transactions.
Another ETH chain address saw approximately 7,800 USDT stolen in 10 transactions, mainly through BitKeep's Swap service, using OKX for transaction fees.
Urging increased vigilance, SlowMist advises users to exercise caution, especially when downloading apps from unverified sources.
Relying on official app sources reduces the risk of falling victim to such fraudulent schemes.
Social media platforms, particularly Meta's, are increasingly targeted by scammers worldwide, raising concerns about user safety and the effectiveness of platform moderation. Despite efforts to combat scams, Meta's response to fabricated news and inadequate safety measures underscore the ongoing challenge of protecting users from online threats.
Weatherly
JinseFinanceIn a move to combat telephone fraud, a law enforcement agency recently executed an operation that led to the apprehension of two individuals, aged 20 and 33. The arrests took place in a public facility, and the suspects are currently under investigation for their involvement in a series of fraudulent activities.
JoyFTX clientele finds itself confronted by a deceptive priority withdrawal scam. These misleading emails purportedly originate from FTX Trading, West Realm Shires Services, and FTX EU.
CatherineThe scam of JPEX is heavily dependent on the “celebrity effect” to infiltrate various platforms, channels, and even different regions for promotion.
OliveA group of hackers exploited the Twitter account of a crypto exchange, Gate io, to promote fraudulent activities. In an ...
BitcoinistCybercriminals drew thousands to a fake stream on YouTube inducing many to click on fake cryptocurrency advertisements.
BeincryptoCatherineOn Sunday, hackers took control of the British Army's official social media accounts, using them to promote fraudulent NFT collections ...
BitcoinistBinance CEO CZ believes that crypto companies that are poorly managed, run poorly, or release poorly designed products should be allowed to collapse.
Cointelegraph