Cybercriminals are using fake versions of popular websites like Coinbase, Gemini, Kraken and MetaMask in an attempt to drain victims’ bitcoin wallets.
According to Netskope, criminal groups use search engine optimization (SEO) techniques, which involve a wide network of bots that post links to phishing pages on other websites (mainly blogs) to increase their search engine rankings like google
In some cases, researchers claim that these fake websites rank better than the legitimate sites they copy.
How does the campaign work?
When the victim clicks on a malicious link, they will be greeted by relatively realistic-looking imitation websites hosted on Google Sites or Microsoft Azure, which will often include a detailed FAQ.
Using the popular crypto wallet MetaMask as an example, Netskope researchers said users would be directed to “Download now” or “Sign in”, where the site would attempt to trick users into their crypto wallet or their name username and password.
How can I avoid being engaged?
Netskope gave some advice for those who don’t want to end up being the latest victims of phishing attacks.
This includes never entering your credentials after clicking a link, and instead always navigating directly to the site you’re trying to log in to.
For organizations, Netskope also recommends using a secure web gateway to detect and block phishing.
Unfortunately, this is not the first time that cybercriminals have used crypto exchanges as part of a ploy, in fact, they seem to be getting more inventive.
Recently, a group of cybercriminals created a deep spoof of Binance Chief Communications Officer (CCO) Patrick Hillmann to extort money from companies, trying to convince them that they were applying for a listing on the crypto exchange.
Do you want to prevent your organization from being compromised? Check out our guide to the best endpoint protection
[ad_2]
Source link
