Hedera

when

According to a social media post by blockchain analysis firm Bitrace, scanning the wrong QR code could drain your wallet.&nbsp;
Bitrace is <a href="https://medium.com/@bitracetech/beware-of-scanning-unknown-payment-qr-codes-funds-stolen-instantly-788cdeaeb87c" target="_blank" rel="noopener nofollow">warning</a> of a new type of crypto scam “where theft is carried out through a payment QR code transfer test, essentially deceiving users into authorizing wallets.”
According to Bitrace, the scam follows a specific <a href="https://x.com/Bitrace_team/status/1821475893711348070" target="_blank" rel="noopener nofollow">pattern</a>. First, the scammer proposes that the user swap tokens over-the-counter — through a wallet-to-wallet transfer rather than an exchange — and offers an exchange rate that beats the market. 
They also offer a fee denominated in Tron’s TRX (<a href="https://cointelegraph.com/tron-price-index">TRX</a>) token in exchange for long-term cooperation.&nbsp;To gain the user’s trust, they even make a small payment of USDT (<a href="https://cointelegraph.com/tether-price-index">USDT</a>), a dollar-pegged stablecoin.
Related: <a href="https://cointelegraph.com/news/crypto-exploits-near-1-4-billion-2024-hackers-target-cefi-report">Crypto exploits near $1.4B this year as hackers target CeFi: Report</a>
That’s when the scammer asks the user to partake in a “small repayment test,” which purportedly involves returning the USDT by scanning a QR code. The QR code directs the user to a third-party website asking them to confirm the “test” transaction. Clicking “confirm” steals the user’s wallet authorization, Bitrace said. 
According to Bitrace, at least 27 wallet holders appear to have been victimized, collectively losing around $120,000 in USDT. The attacks took place between July 11 and July 17, and the scammer used the same wallet in every instance.
According to Bittrace, the funds were then moved through five intermediary addresses and into three accounts with Cambodian crypto exchange Huione for laundering.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-08/a94c4ba5-36c6-434d-975a-71d73233e17d.png" alt="Bitrace warns of new crypto scam using QR codes" title="">
 <figcaption style="text-align: center;">
 The USDT was funneled through five addresses and into accounts with the crypto exchange&nbsp;Huione. Source: Bitrace
 </figcaption>
</figure>
Cyberattacks are on the rise in 2024. According to&nbsp;<a href="https://cointelegraph.com/news/crypto-exploits-near-1-4-billion-2024-hackers-target-cefi-report">cybersecurity firm Cyvers</a>, the total volume of stolen crypto funds this year is approaching $1.4 billion.
Access control breaches — often in the form of phishing attacks — accounted for the overwhelming majority of stolen funds, around $490 million in the second quarter alone.
“A risk check on the counterparty’s address before the transaction is crucial,” Bitrace said, adding that the company is developing a “one-click risk check tool to help users identify potential risks associated with target addresses.”
Magazine: <a href="https://cointelegraph.com/magazine/crypto-phishing-scammer-hedera/">Crypto-Sec: Phishing scammer goes after Hedera users, address poisoner gets $70K</a>

Bitrace warns of new crypto scam using QR codes

Cointelegraph

Other articles published on Aug 8, 2024

XRP whales holdings hit ATH amid Ripple’s win over SEC

Compound Finance Faces Scrutiny After Controversial Proposal 289 Passes

Hayes: Bitcoin Bisa Naik Saat Pair Dolar-Yen Berubah

Crypto Scams on the Rise: Fake Video Conferencing Apps Target Job Seekers for Crypto

8 Days Left: Join the Viral Poodlana Craze Before the Presale Ends

Uniswap Foundation Reports $36.81M in Reserves and $3.22M in New Grants for Q2

Join our free newsletter for daily crypto updates!