ZachXBT

Discord

Read

<p class="is-style-lead">As per multiple reports on X, CertiK’s official website temporarily featured a Discord link, which redirected users to a fake server with malicious malware.</p> 
<p>In a recent security incident, a <a href="https://crypto.news/tag/discord/" target="_blank" rel="noreferrer noopener">Discord</a> link has been featured on the website of a security <a href="https://crypto.news/tag/blockchain/" target="_blank" rel="noreferrer noopener">blockchain</a> auditing firm <a href="https://crypto.news/tag/certik/" target="_blank" rel="noreferrer noopener">Certik</a>, which led users to a fake server with malicious malware. According to blockchain community members @PopPunkOnChain and @Burnttoken, who brought attention to the discovery, the fraudulent server hosted a counterfeit CollabLand bot and malicious software designed to steal assets from crypto wallets.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://twitter.com/CertiK?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@CertiK</a> The discord link on your website links to a fake discord server with a fake version of <a href="https://twitter.com/Collab_Land_?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@Collab_Land_</a> that hosts a wallet drainer.<br><br>Is the Certik team complicit? <a href="https://t.co/Fp8Sk4Kf1t" target="_blank">pic.twitter.com/Fp8Sk4Kf1t</a></p>— Burner (∞) (@Burnttoken) <a href="https://twitter.com/Burnttoken/status/1736517143397867960?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 17, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p> You might also like: <a href="https://crypto.news/certik-reports-a-critical-security-vulnerability-in-solanas-saga-phone/"> CertiK reports a critical security vulnerability in Solana’s Saga phone </a> </p> 
<p>Crypto.news couldn’t immediately confirm nor deny those reports. As of press time, CertiK made no public statement on the matter, and the scale of the attack remains unclear. However, the official website no longer features the malicious link, indicating the CertiK team might have already patched the incident.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">forgot to post the funniest part. Just follow the steps in the discord <a href="https://twitter.com/CertiKCommunity?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@CertiKCommunity</a> <a href="https://t.co/OGti6dF3Ss" target="_blank">pic.twitter.com/OGti6dF3Ss</a></p>— Burner (∞) (@Burnttoken) <a href="https://twitter.com/Burnttoken/status/1736522358549291225?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 17, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>In mid-November 2023, crypto.news <a href="https://crypto.news/certik-and-zachxbt-impersonators-stole-over-300k-in-crypto/" target="_blank" rel="noreferrer noopener">reported</a> that scammers had devised a new method of stealing funds by impersonating legitimate crypto investigators and using their identities to deceive unsuspecting victims on X.</p> 
<p>Crypto sleuth ZachXBT issued a cautionary post on the social network dated Nov. 15, revealing the emergence of a “large network of bot accounts” actively impersonating crypto detectives. According to ZachXBT’s investigation, these scammers have successfully pilfered over $300,000 worth of cryptocurrency in just a matter of days. As noted by BleepingComputer, the scammers also impersonated blockchain analytics firms such as CertiK and Scam Sniffer.</p> 
<p> Read more: <a href="https://crypto.news/discord-and-twitter-hacks-result-in-crypto-losses-of-6m/"> Discord and Twitter hacks result in crypto losses of $6m </a> </p>

CertiK’s Discord link briefly redirected to fake server with malware, reports say

crypto.news

Other articles published on Dec 18, 2023

Crypto giants pour $80m into pro-crypto US election committee

Binance Crackdown Unleashes Unprecedented Scrutiny on Crypto Transactions

Cardano is becoming bearish: analyst explains

NFTs Worth $1.5m Stolen From Flooring Protocol In A Cyberattack Exploit

Shiba Inu (SHIB) Witnesses Epic $110 Million Whale Activity Amid 275% On-Chain Spike

Stacks (STX) price soars as inscriptions spike transactions

Join our free newsletter for daily crypto updates!