MSTR2100

Elon Musk

The latest crypto scams, hacks and exploits and how to avoid them: Crypto-Sec
<h2 id="new-ai-scam-targets-xrp-holders">New AI scam targets XRP holders</h2>
A new artificial intelligence-generated video is circulating on YouTube. The likely scam is similar to one that earlier featured an AI-generated Elon Musk, but it now features Ripple co-founder Chris Larsen.
Dramatic music plays throughout the video as the fake Larsen states, “Today is a significant day for everyone who holds XRP.” 
He claims that instead of burning 150 million XRP (<a data-ct-non-breakable="null" href="https://cointelegraph.com/xrp-price-index" rel="" target="_self" text="null" title="https://cointelegraph.com/xrp-price-index">XRP</a>) as Ripple usually does on an annual basis, the company is “giving it all back.” 
According to a copy of the video seen by Cointelegraph, every XRP holder can double their current holdings by visiting the website. Viewers are urged to visit the website in order to not miss out on this “historic” opportunity.
<figure>
 <img alt="AI scam targets Ripple holders and memecoin trader loses it all: Crypto-Sec" src="https://s3.cointelegraph.com/uploads/2024-10/0192af18-8ab2-7274-90d6-c68604a6babe" title="">
 <figcaption style="text-align: center;">
 AI-generated video of Chris Larsen. Source: RippleUs
 </figcaption>
</figure>
The video is published on an unlisted page, which prevents it from showing up in searches. This implies that the channel may be sending out links to it through email or other relatively private means, which it may be doing to prevent the video from being discovered by YouTube and taken down. 
These emails likely contain a website URL with an XRP Ledger address where victims are asked to send their funds, only to lose them forever. However, Cointelegraph could not determine the website or address being used.
AI-generated scam videos are becoming an increasing problem in the crypto space. A similar video featuring an AI-generated Musk was <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/fake-bitcoin-2024-ai-stream-mog-phishing-dmm-hack-dust-exsi-ransomware/" rel="null" target="null" text="null" title="null">broadcast during the Bitcoin 2024 conference</a>, and victims lost over $79,000 worth of cryptocurrency because of it. 
The scam has become well-known, and the existence of these videos implies that scammers may have given up on the Musk theme, turning to other well-known figures in the cryptocurrency space.
<h2 id="phish-of-the-week-trader-with-10x-gain-loses-it-all-from-transfer">Phish of the week: Trader with 10x gain loses it all from “transfer”</h2>
On Oct. 14, a trader lost over $300,000 worth of memecoin MicroStrategy 2100 (MSTR2100) in a phishing attack after having wracked up more than 10x in unrealized gains.
The victim <a data-ct-non-breakable="null" href="https://etherscan.io/tx/0x770a65b650969a2cc6a5e14aa2e299f24ccfdc7a1af86ab33b849b1b6b637477" rel="null" target="null" text="null" title="null">signed</a> a transaction transferring their coins to the attacker, known on Etherscan as “Fake_Phishing607855.” Given that the receiving account was a known scammer, the sender likely did not understand what they were signing.
Just five days before the attack, on Oct. 8, the trader <a data-ct-non-breakable="null" href="https://etherscan.io/tx/0x2a9c32a7e8a2ad3cda0e5817b9b12a3c2a571e0307fe4c6777c081fb640ac7c8" rel="null" target="null" text="null" title="null">purchased</a> 335,468 MSTR2100 tokens from the Uniswap crypto exchange for $17,104 at an average price of approximately $0.05 per coin. Then, beginning on Oct. 10, the coin began to pump. It reached an all-time high of $1.58 on Oct. 13 before declining below $1.00 the following day.
<figure>
 <img alt="AI scam targets Ripple holders and memecoin trader loses it all: Crypto-Sec" src="https://s3.cointelegraph.com/uploads/2024-10/0192af1a-d934-7aa8-9fab-779a439ae6fc" title="">
 <figcaption style="text-align: center;">
 MSTR2100 price chart, Oct. 8—Oct. 14. Source: CoinMarketCap.
 </figcaption>
</figure>
At the exact time of the attack, 7:20 am UTC on Oct. 14, MSTR2100 was worth approximately $0.56 per coin, making the trader’s stash worth more than $188,000, blockchain data shows. This meant that the trader’s unrealized gains were over $170,000, representing a more than 10x rate of return.
Sadly, the trader never got to cash out their winnings. Before they could close out their successful trade, they transferred their entire stash to the fake phishing account.
Blockchain analytics platform Scam Sniffer detected the strange transaction and reported it on X.
<figure>
 <img alt="AI scam targets Ripple holders and memecoin trader loses it all: Crypto-Sec" src="https://s3.cointelegraph.com/uploads/2024-10/0192af1c-2cd7-758c-bf83-296c9d7c8c89" title="">
 <figcaption style="text-align: center;">
 Source: <a data-ct-non-breakable="null" href="https://x.com/realScamSniffer/status/1845741860280819991" rel="null" target="null" text="null" title="https://x.com/realScamSniffer/status/1845741860280819991">Scam Sniffer</a>
 </figcaption>
</figure>
Scam Sniffer did not speculate on what exact method the attacker used to trick the trader. However, phishing scams usually rely on fake websites that pose as trusted apps. 
The victim was a frequent user of Uniswap, so they may have fallen prey to a fake version of that exchange. If so, the fake app may have pretended to offer a swap transaction when it was, in fact, asking the user to sign a simple transfer.
Users can often avoid phishing attacks by carefully inspecting transactions before confirming them.
<h2 id="internet-archive-leaks-31-million-passwords">Internet Archive leaks 31 million passwords</h2>
Crypto users with registered Internet Archive accounts may want to review the passwords they used and be extra cautious of emails they receive purporting to be from the site. 
According to an Oct. 20 report from NPR, hackers <a data-ct-non-breakable="null" href="https://www.npr.org/2024/10/20/nx-s1-5159000/internet-archive-hack-leak-wayback-machine" rel="null" target="null" text="null" title="null">broke</a> into Internet Archive’s servers and stole data associated with 31 million user accounts, including each user’s email address and “encrypted passwords” or password hashes.
Users affected by the data breach may be subject to email-based phishing attempts in the near future, as the scammers now know that these users are interested in Internet Archive. In addition, the attackers could use hash-cracking software on the stolen hashes, which could potentially reveal users’ plaintext passwords.&nbsp;
Internet Archive is requiring users to change their passwords, so the attackers shouldn’t be able to access theiraccounts. However, if a user happens to use the same password on both Internet Archive and a crypto exchange, their exchange account may be at risk of unauthorized access.
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/authy-2fa-app-leaked-phone-numbers-text-phishing" rel="null" target="null" text="null" title="null">Authy 2FA app leaked phone numbers that may be used for text phishing</a>
According to an Oct. 17 blog post from Internet Archive, the attackers also “<a data-ct-non-breakable="null" href="https://blog.archive.org/2024/10/18/internet-archive-services-update-2024-10-17/" rel="null" target="null" text="null" title="null">defaced</a>” the website’s javascript. This forced the team to “bring the site down to access and improve our security.” 
As of Oct. 21, two of the site’s services have resumed: Wayback Machine and Archive-It. In addition, the site’s blog is functioning normally. However, all of its other services are still closed, including video and audio streaming, open library ebook borrowing, and other functions.
<figure>
 <img alt="AI scam targets Ripple holders and memecoin trader loses it all: Crypto-Sec" src="https://s3.cointelegraph.com/uploads/2024-10/0192af1c-cd5d-7e89-b5e3-cfc7082e306f" title="">
 <figcaption style="text-align: center;">
 Service availability message. Source: Internet Archive.
 </figcaption>
</figure>
Password breaches like this one continue to pose a threat to crypto users and web users in general. The web industry is working to <a data-ct-non-breakable="null" href="https://www.google.com/account/about/passkeys/" rel="null" target="null" text="null" title="null">replace</a> passwords with passkeys that rely on public-private cryptography and work similarly to a cryptocurrency wallet. However, this transition is only in its beginning stages.
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/rabby-scammer-konpyl-crypto-ceo-mountain-victims/" rel="" target="_self" text="null" title="https://cointelegraph.com/magazine/rabby-scammer-konpyl-crypto-ceo-mountain-victims/">Fake Rabby Wallet scam linked to Dubai crypto CEO and many more victims</a>
Because of the threat of password breaches, some users have taken to using password managers to secure their passwords. However, those can be breached as well, as <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/lastpass-attacker-stole-password-vault-data-showing-web2-s-limitations" rel="null" target="null" text="null" title="null">happened with LastPass</a> in 2022.

AI scam targets Ripple holders and memecoin trader loses it all: Crypto-Sec

Table of Contents

Cointelegraph

Other articles published on Oct 21, 2024

Simplifying On-Chain Data: The Key to Web3 Mass Adoption?

Solana Co-Founder Praises Base’s Role in Ethereum

Coinbase’s Armstrong Rallies Crypto Support for Deaton Over Warren

Sekuya Set to Showcase at the Inaugural Indonesia Game Festival (IGF) 2024

Gate Ventures, Boon Ventures and Movement Labs to Launch a $20M Fund for Web3 Startups

Scroll Allocates 7% of SCR Supply for Its First Airdrop

Join our free newsletter for daily crypto updates!