Bitcoin ETF

Crypto scammers have found a new way to abuse X interface to propagate scams, fake giveaways, and deceptive Telegram channels. 
As reported by BleepingComputer, fraudsters have started actively taking advantage of what appears to be a user interface flaw, enabling them to create seemingly legitimate URLs containing malicious content. 
This flaw, initially identified by X user @rcwht_, empowers scammers to publish tweets that mimic those from authentic accounts. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Interesting scam crypto-related tweets. Link looks like it should direct to binance, but actually direct to some scammy account. Been tagged in two of these and they both use <a href="https://t.co/2HhH3FW3nT" target="_blank">https://t.co/2HhH3FW3nT</a> – anyone know whats going on here? <a href="https://t.co/NVtFkm12d6" target="_blank">pic.twitter.com/NVtFkm12d6</a>— Rob White (@rcwht_) <a href="https://twitter.com/rcwht_/status/1736481813046988850?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 17, 2023</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
According to BleepingComputer, scammers can change the status_id field while putting the legitimate tag in the account_name field. For instance: 
<blockquote class="wp-block-quote"> 
 https://x.com/[account_name]/status/[status_id] would look like https://x.com/itscrypto_news/status/1736650221243826564 
</blockquote> 
In the example above, the link would be displayed as if it were posted by crypto.news. However, when a user opens the link, it redirects them to <a href="https://crypto.news/tag/elon-musk/">Elon Musk</a>‘s post as the status ID fetches the corresponding post from the website’s database without verifying if the post is linked to the account_name field. 
 You might also like: <a href="https://crypto.news/scammers-exploit-bitcoin-etf-hype-with-fake-ibtc-token/"> Scammers exploit Bitcoin ETF hype with fake IBTC token </a> 
The vulnerability apparently allows scammers to modify the account name, even for high-profile accounts. As a result, fraudsters have been exploiting the flaw for a few weeks now, targeting crypto-related accounts such as <a href="https://crypto.news/tag/binance/">Binance</a>, <a href="https://crypto.news/tag/ethereum/">Ethereum</a> Foundation, and many others with fake airdrops, security researcher MalwareHunterTeam told BleepingComputer. 
The report notes that this redirect is a standard X feature and is unlikely to change for enhanced security. Consequently, users are advised to scrutinize the address bar when clicking on X links to confirm they visit the intended tweet without redirection. 
 Read more: <a href="https://crypto.news/fbi-alarms-crypto-victims-as-scammers-impersonate-venture-capital-executives-on-telegram/"> FBI alarms crypto victims as scammers impersonate venture capital executives on Telegram </a>

X users at risk as crypto scammers exploit new design flaw

crypto.news

Other articles published on Dec 21, 2023

Santiment Warns About Three Altcoins! "Beware of FOMO, A Correction May Come!"

Job Security And The Use Of AI

Liquidator takes action: $1.1 billion seized from Three Arrows founders

bitsCrunch BCUT Community Sale Sells Out In Record 24 Minutes, Raising $3.85M (21 Dec)

BC8.AI Launch by io.net Marks a Resounding Success

Worldcoin Reportedly Abandons Orb Verification in India, France, and Brazil

Join our free newsletter for daily crypto updates!