Bitcoin ETF

<div class="cryptonews">
 <p class="is-style-lead">Crypto <a rel="noopener noreferrer nofollow" title="scammers" href="https://thebittimes.com/tag/scammers.html">scammers</a> have found a new way to abuse X interface to propagate scams, fake giveaways, and deceptive Telegram channels.</p>
 <p>As reported by BleepingComputer, fraudsters have started actively taking advantage of what appears to be a user interface flaw, enabling them to create seemingly legitimate URLs containing malicious content.</p>
 <p>This flaw, initially identified by X user @rcwht_, empowers <a rel="noopener noreferrer nofollow" title="scammers" href="https://thebittimes.com/tag/scammers.html">scammers</a> to publish tweets that mimic those from authentic accounts.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Interesting scam crypto-related tweets. Link looks like it should direct to binance, but actually direct to some scammy account.<br><br>Been tagged in two of these and they both use https://t.co/2HhH3FW3nT – anyone know whats going on here? pic.twitter.com/NVtFkm12d6</p>— Rob White (@rcwht_) December 17, 2023
   </blockquote>
  </div>
 </figure>
 <p>According to BleepingComputer, <a rel="noopener noreferrer nofollow" title="scammers" href="https://thebittimes.com/tag/scammers.html">scammers</a> can change the status_id field, while putting the legitimate tag in the account_name field. For instance:</p>
 <ul>
  <li>https://x.com/[account_name]/status/[status_id]</li>
  <li>would look like</li>
  <li>https://x.com/itscrypto_news/status/1736650221243826564</li>
 </ul>
 <p>In the example above, the link would be displayed as if it were posted by <a rel="noopener noreferrer nofollow" title="crypto" href="https://thebittimes.com/tag/crypto.html">crypto</a>.news. However, when a user opens the link, it redirects them to Elon Musk‘s post as the status ID fetches the corresponding post from the website’s database without verifying if the post is linked to the account_name field.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Scammers exploit Bitcoin ETF hype with fake IBTC token
 </div>
 <p>The vulnerability apparently allows scammers to modify the account name, even for high-profile accounts. As a result, fraudsters have been exploiting the flaw for a few weeks now, targeting crypto-related accounts such as Binance, Ethereum Foundation, and many others with fake airdrops, security researcher MalwareHunterTeam told BleepingComputer.</p>
 <p>Given that this redirect is a standard X feature, it is unlikely to change for enhanced security, the report notes. Consequently, <a rel="noopener noreferrer nofollow" title="users" href="https://thebittimes.com/tag/users.html">users</a> are advised to scrutinize the address bar when clicking on X links to confirm they are visiting the intended tweet without redirection.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> FBI alarms crypto victims as scammers impersonate venture capital executives on Telegram
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/x-users-at-risk-as-crypto-scammers-exploit-new-design-flaw-tbt74374.html">https://thebittimes.com/x-users-at-risk-as-crypto-scammers-exploit-new-design-flaw-tbt74374.html</a></p>

X users at risk as crypto scammers exploit new design flaw

TheBitTimes

Ďalšie články zverejnené 21. 12. 2023

Grayscale and Harris Poll unveil cryptocurrency’s role in 2024 election

Core Scientific Finalizes Global Settlement Agreement, Will Emerge from Bankruptcy in January

Meta pleads not guilty to recklessly handling crypto scam ads

Will Bitcoin ETFs Skyrocket or Sink? The Truth Revealed

AI Technology Poised to Revolutionize Decision-Making Across Various Sectors

ChatGPT predicts Litecoin price for the start of 2024

Pripojte sa k nášmu bezplatnému bulletinu a získajte denné aktualizácie kryptomien!