CoinsPaid

SlowMist reveals a sophisticated phishing attack on friend.tech, where fraudsters used fake interviews and malicious scripts to target users.
Experts <a href="https://slowmist.medium.com/beware-of-phishing-attacks-by-fake-journalists-9cc3ed09d7c9" target="_blank" rel="noopener noreferrer nofollow">found</a> that unknown attackers sent a link containing a malicious JavaScript script. Fraudsters tricked users into adding it as a bookmark, laying the groundwork for future malicious activities.
The investigation also revealed that the attacker posed as a journalist from a well-known news agency and even had more than ten thousand followers on Twitter. The criminal targeted key opinion leaders who, due to their popularity, would consider it reasonable to receive invitations to interviews.
You might also like: <a href="https://crypto.news/chinese-hackers-target-crypto-investors-with-fake-skype/" rel="noopener noreferrer nofollow"> Chinese hackers target crypto investors with fake Skype </a>
To lull vigilance, the attacker followed on Twitter the same people that the victims did. This gave the impression that they were part of the same community. After scheduling the interview, the attacker offered to join the interview on Telegram and even provided an interview plan. After the discussion, the attacker asked to fill out a form and open a phishing link.
However, the SlowMist team did not indicate how much cryptocurrency the attackers could steal in this fraudulent way. It is also unknown how many users were affected by the phishing attack. However, experts asked users to be vigilant and check for suspicious content.
<blockquote class="wp-block-quote">
 “While we might not be familiar with all these scams, we can significantly avoid phishing attacks by: not clicking unknown links; learning to identify phishing links; and maintaining skepticism and continuous verification for actions involving authorization or password input.” <cite>SlowMist team</cite>
</blockquote>
At the end of July, a programmer from the <a href="https://crypto.news/tag/estonia/" data-type="link" data-id="https://crypto.news/tag/estonia/" rel="noopener noreferrer nofollow">Estonian</a> company CoinsPaid met via video call with a recruiter who had reached out via LinkedIn with a lucrative job offer. During the interview, he <a href="https://crypto.news/coinspaid-reveals-how-job-offer-led-to-37m-hack/" rel="noopener noreferrer nofollow">was asked to upload</a> a file to take a technical test, which he completed on his work computer.
A few days later, on July 22, the CoinsPaid security service noticed a series of unusual withdrawals – money was quickly drained from the company’s accounts. By that time, CoinsPaid <a href="https://crypto.news/breaking-coinspaid-targeted-in-37-3-million-hack/" rel="noopener noreferrer nofollow">had lost </a>$37 million.
You might also like: <a href="https://crypto.news/coinspaid-survived-the-hack-with-an-expensive-lesson-ceo-says/" rel="noopener noreferrer nofollow"> CoinsPaid survived the hack with an expensive lesson, CEO says </a>

Friend.tech phishing scheme involved fake journalists

crypto.news

Other articles published on Nov 14, 2023

Analytics Firm Picks Top Performers Among 100 Crypto Ecosystems, Names 4 Altcoins

GD Stock (NYSE: GD) Close to $250, Will Rally Continue or Fizzle Out?

MOONs live on as r/Cryptocurrency to renounce smart contract igniting 149% surge

Crypto Rebellion: Industry Leaders Fight Back As US Treasury’s Tax Reporting Plan Sparks Outcry

The Leading Risk Summit for WEB3

Uniswap Labs Rolls Out New Crypto Wallet to 430,000 New Android Users

Join our free newsletter for daily crypto updates!