Ethereum

Reddit

Uniswap

<p class="my-0.5">The dynamic world of cryptocurrency is witnessing a worrying trend: the cloning of prominent crypto-related websites by scammers aiming to drain wallets. This comprehensive article delves into the details of this scam, highlighting the importance of security vigilance in the burgeoning crypto landscape.</p> 
<p>&nbsp;</p> 
<h2 class="text-h4 font-heavy" style="text-align: center;" id="a-new-wave-of-phishing-scams">A New Wave of Phishing Scams</h2> 
<p class="my-0.5">Phishing scams have long plagued the Internet, but the recent surge in crypto’s popularity has seen these nefarious activities evolve. Recently, scammers have begun to clone <a href="https://blockworks.co/">websites</a> of well-established crypto media outlets such as Blockworks and Ethereum blockchain scanner Etherscan. The aim? To deceive unsuspecting users into connecting their wallets to malicious sites, thereby compromising the already complex landscape of cryptocurrency security.</p> 
<p>&nbsp;</p> 
<blockquote class="twitter-tweet"> 
 <p dir="ltr" lang="en">the victim signed Uniswap Permit2 malicious phishing signatures like this 👇 <a href="https://t.co/NcXIotokwL">pic.twitter.com/NcXIotokwL</a></p> 
 <p>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1717471951508427240?ref_src=twsrc%5Etfw">October 26, 2023</a></p>
</blockquote> 
<p><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></p> 
<h2 class="text-h4 font-heavy" style="text-align: center;" id="the-modus-operandi-counterfeit-websites">The Modus Operandi: Counterfeit Websites</h2> 
<p class="my-0.5">Scammers are creating counterfeit versions of familiar cryptocurrency-related websites to lend an air of legitimacy to their operations. A notable example features a fake Blockworks website with a fabricated “BREAKING” news report claiming a multimillion-dollar “approvals <a href="https://walletinvestor.com/magazinadmin/stars-arena-bounces-back-secures-funding-after-3m-exploit/">exploit</a>” on the decentralized exchange Uniswap. This bogus article directs users to a counterfeit Etherscan site to revoke approvals.</p> 
<p>&nbsp;</p> 
<h2 class="text-h4 font-heavy" style="text-align: center;" id="expanding-the-reach-the-role-of-social-media">Expanding the Reach: The Role of Social Media</h2> 
<p class="my-0.5">To widen their net and create an illusion of credibility, the scammers shared the fake Uniswap news article across various crypto-related subreddits using compromised Reddit accounts. Beneath the guise of a token and smart contract approval checker, the fake Etherscan site was designed to conduct a wallet-draining operation.</p> 
<p>&nbsp;</p> 
<p><iframe loading="lazy" title="YouTube video player" src="https://www.youtube.com/embed/hFFf2qPx7PU?si=O-giu2SLfJrAGi5_" width="560" height="315" frameborder="0" allowfullscreen></iframe></p> 
<h2 class="text-h4 font-heavy" style="text-align: center;" id="tactics-and-targets-insights-from-beosin">Tactics and Targets: Insights from Beosin</h2> 
<p class="my-0.5">Blockchain security firm Beosin conducted an in-depth analysis of the scam’s tactics. According to their findings, the attacker aimed to drain wallets holding at least 0.1 Ethereum, valued at approximately $180<sup><a id="user-content-fnref-1%5E-10" class="text-indigo-500 underline hover:text-indigo-800" href="https://app.jasper.ai/chat#user-content-fn-1%5E" target="_blank" rel="noopener noreferrer" data-footnote-ref="true" aria-describedby="footnote-label" data-airgap-id="1406">1</a></sup>. However, the scam’s execution was flawed, failing to initiate phishing transactions after connecting to a user’s wallet.</p> 
<p>&nbsp;</p> 
<h2 class="text-h4 font-heavy" style="text-align: center;" id="a-well-planned-scam-the-timeline">A Well-Planned Scam: The Timeline</h2> 
<p class="my-0.5">The domain registration dates of the fake websites indicate a well-prepared and coordinated scam. The counterfeit Etherscan site, approvalscan.io, was registered on October 25th, followed by the fake Blockworks site, blockworks.media, a day later.</p> 
<p>&nbsp;</p> 
<h2 class="text-h4 font-heavy" style="text-align: center;" id="not-an-isolated-incident">Not an Isolated Incident</h2> 
<p class="my-0.5">The cloning of these websites is not an isolated incident. On October 25th, Web3 anti-scam platform, Scam Sniffer, reported a similar case involving a website mimicking the reputable crypto news outlet, Decrypt.</p> 
<p>&nbsp;</p> 
<h2 class="text-h4 font-heavy" style="text-align: center;" id="the-importance-of-vigilance-and-education">The Importance of Vigilance and Education</h2> 
<p class="my-0.5">These scams underscore the importance of increased vigilance within the cryptocurrency community. Users are urged to verify the authenticity of websites, especially when encountering sensational or too-good-to-be-true information. Cross-referencing with multiple trusted sources can help prevent falling into the trap of these deceptive schemes.</p> 
<p class="my-0.5">Industry stakeholders must collaborate to raise awareness about potential threats and promote best practices for security. The use of hardware wallets and multi-factor authentication can enhance cryptocurrency security.</p> 
<p>&nbsp;</p> 
<h2 class="text-h4 font-heavy" style="text-align: center;" id="conclusion-the-need-for-user-vigilance">Conclusion: The Need for User Vigilance</h2> 
<p class="my-0.5">The emergence of scammers cloning cryptocurrency-related websites is a troubling development in the ongoing battle against phishing scams. These deceptive tactics emphasize the need for users to be vigilant and cautious in the cryptocurrency space. As the cryptocurrency ecosystem continues to evolve, security awareness and education will remain crucial in safeguarding assets and maintaining trust within the community.</p>

Scammers Clone Blockworks Site

Table of Contents

WalletInvestor

Other articles published on Oct 27, 2023

GAM3 Awards return to showcase the best in web3 gaming

United Kingdom experiences a rise in Bitcoin purchase searches

Roobet Celebrates Nippon Baseball Championship with $1,000,000 Free-to-Play Contest

Celebrating Excellence: Traders Fair & Awards 2023 Winners to be Awarded at Ho Chi Minh Gala Night

Solana Labs upcoming ‘Web3 Incubator Program’ to nurture startup companies

How to safeguard assets if your crypto exchange is in trouble

Join our free newsletter for daily crypto updates!