Researchers found several fake accounts on the social network X, whose operators pretend to be specialists in investigating cryptocurrency scams and representatives of companies involved in blockchain security.
To attract potential victims, scammers publish reports about hacking major cryptocurrency platforms, urging users to act quickly to protect their digital assets from possible theft. To do this, you allegedly urgently need to click on the link to the malicious site (at revoketokens[.] io or revokea[.]sh) and revoke the permission by connecting your wallet to this resource. As soon as this happens, attackers steal the user's funds.
In particular, scammers pretend to be such specialists and companies as CertiK, ZachXBT and Scam Sniffer, and use reports of fake hacking of Uniswap and Opensea.
To mimic the legitimate accounts of real experts, hackers create new accounts with similar names. For example, a well-known blockchain analyst ZachXBT has an account @zachxbt, and fraudsters have created an account @zacheryxbt.
The Bleeping Computer publication reports that many X users fell for this trick (some of them have hundreds of thousands of subscribers) and widely spread information about scammers and fake hacks.
As an example, we can cite the message of VX-Underground researchers, who mistakenly assumed that information about hacking the Opensea platform came from a reliable account. In a later post, VX-Underground explained how they fell for the scam trick.
The scale of the campaign is also notable: bot accounts promoted hashtags like #UniswapExploit so actively that they eventually made it to the top trending topics in the United States.
A researcher at ZachXBT, whose account was imitated by scammers, told reporters that he first noticed this tactic of intruders on November 9. It was then that Hayden Adams, founder of the Uniswap decentralized exchange, warned the cryptocurrency community about fraud, specifying that there are no exploits for Uniswap in nature, and reports about this come from fake X accounts posing as ZachXBT, Certik and other well-known personalities in the cryptocurrency community.
According to the real ZachXBT, the attackers have already stolen more than $ 305,000 in cryptocurrency in this way. Assets stolen from victims of these attacks are stored at addresses 0x85a5b2968fae4e7f60f14e3bfc2ebda67050740f and 0xe91fa37c3c5cf801cc8c6cd25a4d2399b3fba4e8.
To attract potential victims, scammers publish reports about hacking major cryptocurrency platforms, urging users to act quickly to protect their digital assets from possible theft. To do this, you allegedly urgently need to click on the link to the malicious site (at revoketokens[.] io or revokea[.]sh) and revoke the permission by connecting your wallet to this resource. As soon as this happens, attackers steal the user's funds.
In particular, scammers pretend to be such specialists and companies as CertiK, ZachXBT and Scam Sniffer, and use reports of fake hacking of Uniswap and Opensea.
To mimic the legitimate accounts of real experts, hackers create new accounts with similar names. For example, a well-known blockchain analyst ZachXBT has an account @zachxbt, and fraudsters have created an account @zacheryxbt.
The Bleeping Computer publication reports that many X users fell for this trick (some of them have hundreds of thousands of subscribers) and widely spread information about scammers and fake hacks.
As an example, we can cite the message of VX-Underground researchers, who mistakenly assumed that information about hacking the Opensea platform came from a reliable account. In a later post, VX-Underground explained how they fell for the scam trick.
The scale of the campaign is also notable: bot accounts promoted hashtags like #UniswapExploit so actively that they eventually made it to the top trending topics in the United States.
A researcher at ZachXBT, whose account was imitated by scammers, told reporters that he first noticed this tactic of intruders on November 9. It was then that Hayden Adams, founder of the Uniswap decentralized exchange, warned the cryptocurrency community about fraud, specifying that there are no exploits for Uniswap in nature, and reports about this come from fake X accounts posing as ZachXBT, Certik and other well-known personalities in the cryptocurrency community.
According to the real ZachXBT, the attackers have already stolen more than $ 305,000 in cryptocurrency in this way. Assets stolen from victims of these attacks are stored at addresses 0x85a5b2968fae4e7f60f14e3bfc2ebda67050740f and 0xe91fa37c3c5cf801cc8c6cd25a4d2399b3fba4e8.
