Connect

<div class="cryptonews">
 <p class="is-style-lead">The malicious Wallet Drainers <a rel="noopener noreferrer nofollow" title="script" href="https://thebittimes.com/tag/script.html">script</a> used phishing campaigns in Google search results and Twitter ads, stealing millions of dollars from <a rel="noopener noreferrer nofollow" title="users" href="https://thebittimes.com/tag/users.html">users</a>.</p>
 <p>According to Scam Sniffer, the malicious <a rel="noopener noreferrer nofollow" title="script" href="https://thebittimes.com/tag/script.html">script</a> <a rel="noopener noreferrer nofollow" title="stole" href="https://thebittimes.com/tag/stole.html">stole</a> almost $59 million in digital assets from more than 63,000 victims over nine months. Over the past nine months, 10,072 websites have been linked to Wallet Drainers, with activity peaking in May, June and November.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">1/ Alert: A 'Wallet Drainer' has been linked to phishing campaigns on Google search and X ads, draining approximately $58M from over 63K victims in 9 months. pic.twitter.com/ye3ob2uTtz</p>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) December 21, 2023
   </blockquote>
  </div>
 </figure>
 <figure class="wp-block-image size-large"><picture decoding="async" class="wp-image-14230267">
   <source type="image/webp" srcset="https://cdn.thebittimes.com/images/2023/12/21/44914d41aac3dff573ace4bf42307887.webp.webp">
   <img decoding="async" width="1024" height="303" src="https://cdn.thebittimes.com/images/2023/12/21/44914d41aac3dff573ace4bf42307887.webp" alt="Malicious script&nbsp;in Google and X stole $58m in crypto from over 63k users - 1"> 
  </picture>
  <figcaption class="wp-element-caption">
   Source: 21.co
  </figcaption>
 </figure>
 <p>Most of the advertisements were related to <a rel="noopener noreferrer nofollow" title="crypto" href="https://thebittimes.com/tag/crypto.html">crypto</a>currency and NFT airdrops. Moreover, some of them were references to popular blockchain projects, such as Ordinals Dogecoin (DOGE). Malicious ads used regional targeting and page-switching tactics to bypass ad audits, complicating the review process. A test of X’s ad in the feed showed that nine were phishing ads, with over 60% using this wallet drainer.</p>
 <blockquote class="wp-block-quote">
  <p>“Phishing ads employ redirect tricks to seem legit, like disguising links as official domains that actually lead to phishing sites.”</p> <cite>Scam Sniffer experts</cite>
 </blockquote>
 <p>Earlier this month, Ledger, a popular manufacturer of crypto hardware wallets, warned its customers about the dangers of using dapps. The reason was a discovered attack on the supply chain.</p>
 <p>Attackers injected malicious javascript code into the Ledger dapp Connect Kit library, which allows web3 applications to interact with Ledger wallets. This code automatically stole cryptocurrency and NFTs from accounts connected to the service.</p>
 <p>According to Chainalysis, the activity of attackers is beginning to increase – from May 2021 to December 2023, phishers stole $1 billion worth of cryptocurrency. At the initial stage, analysts identified at least 1,013 addresses involved in targeted phishing. Phishing refers to a scam in which the criminal sends emails or SMS messages&nbsp;asking you to click a link or log into your account.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> X users at risk as crypto scammers exploit new design flaw
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/malicious-script-in-google-and-x-stole-58m-in-crypto-from-over-63k-users-tbt74418.html">https://thebittimes.com/malicious-script-in-google-and-x-stole-58m-in-crypto-from-over-63k-users-tbt74418.html</a></p>

Malicious script in Google and X stole $58m in crypto from over 63k users

TheBitTimes

2023년 12월 21일에 게재된 다른 기사

Ethereum to "Easily" Rally 350% and Hit $10,000: Predicts Analyst

Circle Achieves Regulatory Milestone with French Crypto Asset License

Cryptocurrency Criticism from US Senator Elizabeth Warren: 'They Undermine the Fight Against Terr...

Solana Soars to $88: Whales’ $51M Move Sparks Concern

PancakeSwap Community Proposes CAKE Token Total Supply Reduction to 450 Million

PEPE Falls 13% In 7 Days: Is a Reversal In Sight for the Meme?

무료 뉴스레터에 가입하여 매일 최신 암호화폐 소식을 받아보세요!