SlowMist, a firm in crypto security analytics, has recently unveiled a new phishing scam targeting cryptocurrency enthusiasts. This scheme, masterminded by a group of Chinese hackers, ingeniously leverages China’s ban on several international applications. This prohibition has led many in mainland China to search for these apps on third-party platforms, presenting a perfect opportunity for scammers.
The hackers’ strategy focused on popular social media apps like Telegram, WhatsApp, and Skype, which are highly sought after by Chinese internet users. They devised a counterfeit version of Skype, skillfully designed to trap victims and steal their cryptocurrency holdings.
The counterfeit Skype app, falsely claiming to be version 8.87.0.403, stood in contrast to the latest version, 8.107.0.215. The first report of its malicious nature came from a user who lost significant money. Further analysis revealed that the app’s signature had been altered to include malware targeting cryptocurrency wallets.
Central to the scam was manipulating okhttp3, an Android network framework commonly used. The hackers modified this framework to covertly monitor and upload various data types from the victim’s device, including images, user IDs, and phone numbers. More importantly, it targeted information related to cryptocurrency wallets.
The app was programmed to identify and replace crypto wallet addresses found in images and messages with addresses owned by the scammers. This move enabled them to redirect funds for legitimate transactions to their wallets.
The investigation led by SlowMist uncovered over 100 wallet addresses linked to this phishing operation. These addresses were involved in transactions amounting to around 192,856 USDT on the TRON chain and 7,800 USDT on the ETH chain. These addresses have now been blacklisted to prevent further fraudulent activities.
Read Also: Singapore Police Warn of Rising WhatsApp Phishing Scams
The U.S. Commodity Futures Trading Commission (CFTC) on Thursday said it has joined the Winklevoss…
Crypto market crash shows no signs of stopping, with over $120 billion in market cap…
U.S. President Donald Trump has publicly extended support for the crypto industry recently. His statement…
Momentum for the crypto market structure bill is waning in Washington. Thus, Sen. Cynthia Lummis…
Bitcoin plunged below $75,000 on Wednesday after a renewed surge in geopolitical tensions. The downfall…
Cardone Capital, a real estate company headed by Grant Cardone, has once again added to…