Bitcoin ETF

Crypto scammers have found a new way to abuse X interface to propagate scams, fake giveaways, and deceptive Telegram channels. 
As reported by BleepingComputer, fraudsters have started actively taking advantage of what appears to be a user interface flaw, enabling them to create seemingly legitimate URLs containing malicious content. 
This flaw, initially identified by X user @rcwht_, empowers scammers to publish tweets that mimic those from authentic accounts. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Interesting scam crypto-related tweets. Link looks like it should direct to binance, but actually direct to some scammy account. Been tagged in two of these and they both use <a href="https://t.co/2HhH3FW3nT" target="_blank">https://t.co/2HhH3FW3nT</a> – anyone know whats going on here? <a href="https://t.co/NVtFkm12d6" target="_blank">pic.twitter.com/NVtFkm12d6</a>— Rob White (@rcwht_) <a href="https://twitter.com/rcwht_/status/1736481813046988850?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 17, 2023</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
According to BleepingComputer, scammers can change the status_id field while putting the legitimate tag in the account_name field. For instance: 
<blockquote class="wp-block-quote"> 
 https://x.com/[account_name]/status/[status_id] would look like https://x.com/itscrypto_news/status/1736650221243826564 
</blockquote> 
In the example above, the link would be displayed as if it were posted by crypto.news. However, when a user opens the link, it redirects them to <a href="https://crypto.news/tag/elon-musk/">Elon Musk</a>‘s post as the status ID fetches the corresponding post from the website’s database without verifying if the post is linked to the account_name field. 
 You might also like: <a href="https://crypto.news/scammers-exploit-bitcoin-etf-hype-with-fake-ibtc-token/"> Scammers exploit Bitcoin ETF hype with fake IBTC token </a> 
The vulnerability apparently allows scammers to modify the account name, even for high-profile accounts. As a result, fraudsters have been exploiting the flaw for a few weeks now, targeting crypto-related accounts such as <a href="https://crypto.news/tag/binance/">Binance</a>, <a href="https://crypto.news/tag/ethereum/">Ethereum</a> Foundation, and many others with fake airdrops, security researcher MalwareHunterTeam told BleepingComputer. 
The report notes that this redirect is a standard X feature and is unlikely to change for enhanced security. Consequently, users are advised to scrutinize the address bar when clicking on X links to confirm they visit the intended tweet without redirection. 
 Read more: <a href="https://crypto.news/fbi-alarms-crypto-victims-as-scammers-impersonate-venture-capital-executives-on-telegram/"> FBI alarms crypto victims as scammers impersonate venture capital executives on Telegram </a>

X users at risk as crypto scammers exploit new design flaw

crypto.news

Otros artículos publicados el 21 dic 2023

Ethereum Network Set for Upcoming Dencun Upgrade

Job Security And The Use Of AI

Controversial Deepfake Scam Video of Ripple CEO Sparks Outcry

Web3 Growth Marketing Leader Addressable Completes $13.5M Raise Led by BITKRAFT (21 Dec)

Litecoin (LTC) Price Analysis for December 21

Klaytn Network: KLAY Coin Receives Pressure From the EMAs

¡Únete a nuestro boletín gratuito para recibir actualizaciones diarias de criptografía!