Ethereum

Bitcoin

Mist

Read

/send

<div class="protos">
 <div>
  <div>
   <div>
    <p>A fake Skype app designed to drain <a rel="noopener noreferrer nofollow" title="Tether" href="https://thebittimes.com/tag/tether.html">Tether</a> (USDT) being sent to Ethereum and Tron wallets has been flagged by security experts as being possibly linked to a Chinese phishing gang that <a rel="noopener noreferrer nofollow" title="previously" href="https://thebittimes.com/tag/previously.html">previously</a> utilized a fraudulent Binance app.&nbsp;&nbsp;</p>
    <p>Blockchain security firm Slow Mist first discovered the fake app when it was approached by a victim who claimed his funds had been stolen.&nbsp;</p>
    <p>Slow Mist analyzed the app and discovered its ability to detect Tron and Ethereum addresses in both incoming and outgoing messages before replacing them with an alternative address predetermined by the phishing gang.&nbsp;</p>
    <p>It then <strong>hands over control of the victim’s phone to the gang</strong> and uploads files, photos, ID credentials, etc to their domain.</p>
    <p>A Tron address associated with the phishing gang has reportedly received 192,856 USDT through 110 separate transactions while a separate Ethereum address received 7,800 USDT over 10 different transactions.</p>
    <h2 class="wp-block-heading" id="h-chinese-gang-first-impersonated-binance">Chinese gang first impersonated Binance&nbsp;</h2>
    <p>Slow Mist also deduced that the gang is likely Chinese due to distinguishing signature information. In addition, investigators found that the app had <a rel="noopener noreferrer nofollow" title="previously" href="https://thebittimes.com/tag/previously.html">previously</a> been used to <a rel="noopener noreferrer nofollow" title="impersonate" href="https://thebittimes.com/tag/impersonate.html">impersonate</a> the Binance exchange by the same scammers.&nbsp;</p>
    <p>Phishing scams like this reportedly <strong>rely on the inaccessibility of Google Play in China</strong> to prey on victims who instead download apps directly on the web.</p>
    <figure class="wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos">
     <div class="wp-block-embed__wrapper">
      <blockquote class="wp-embedded-content" data-secret="MBgAFDH0c3">
       Client selfies and data stolen from bankrupt Bitcoin ATM firm, hackers claim
      </blockquote><iframe class="wp-embedded-content" sandbox="allow-scripts" security="restricted" style="position: absolute; clip: rect(1px, 1px, 1px, 1px);" title="“Client selfies and data stolen from bankrupt Bitcoin ATM firm, hackers claim” — Protos" src="https://protos.com/client-selfies-and-data-stolen-from-bankrupt-bitcoin-atm-firm-hackers-claim/embed/#?secret=9fyvTHvOKV#?secret=MBgAFDH0c3" data-secret="MBgAFDH0c3" width="500" height="282" frameborder="0" marginwidth="0" marginheight="0" scrolling="no"></iframe>
     </div>
    </figure>
    <p><em>Read more: China bans 80 top <a rel="noopener noreferrer nofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a> influencers on Weibo</em></p>
    <p>Most of the stolen crypto in this case has reportedly been withdrawn in batches and transferred using BitGet (formerly BitKeep), a coin swap service with zero anti-money laundering (AML) or know your customer (KYC) requirements.&nbsp;</p>
    <p>Blockchain analytics firm Elliptic noted that some of these coin swap services are “attractive for criminals seeking to launder their funds,” due to the <strong>minimal-to-zero use of AML/KYC on coin swap sites</strong>.&nbsp;&nbsp;&nbsp;</p>
    <p>Slow Mist flagged 100 addresses associated with the app which has left them all with a risk score of 100, an indication of severe risk.</p>
    <p><em>Got a tip? Send us an email or ProtonMail. For more informed news, follow us on&nbsp;X,&nbsp;</em><em>Instagram</em><em>,&nbsp;</em><em>Bluesky</em><em>, and&nbsp;</em><em>Google News</em><em>, or subscribe to our&nbsp;</em><em>YouTube</em><em>&nbsp;channel.</em></p>
   </div>
  </div>
 </div>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/fake-skype-app-stealing-usdt-previously-impersonated-binance-tbt70108.html">https://thebittimes.com/fake-skype-app-stealing-usdt-previously-impersonated-binance-tbt70108.html</a></p>

Fake Skype app stealing USDT previously impersonated Binance

Table of Contents

TheBitTimes

Other articles published on Nov 13, 2023

India’s Supreme Court Rejects Call for Crypto Regulation, Citing Legislative Jurisdiction

LINK Price Losing Momentum! Will Bulls Hold The Price Above Its Crucial Level?

Bitcoin Price Retraces for More Gains

Bitcoin (BTC) Short Squeeze Hits $37.1K; Decentraland (MANA) & InQubeta (QUBE) Continue to Charm ...

Analyst Compares Kaspa to Cardano, Revealing His KAS Strategy While the Coin Trades in Red

5 New Potential Coin Listings on Tier-1 Exchanges to Watch this Year

Join our free newsletter for daily crypto updates!