#scam
🔞 FAIL: Poor man lost $6,500,000 by buying a cold wallet at a discount through the Chinese TikTok (Douyin).

The wallet was compromised - the private key was leaked when it was created.

Almost all «cheap» cold wallets on the Internet are fakes.

@Сryptoz ₿

#scam #breaking #records
🤯 The largest data leak in history - 16,000,000,000 accounts (Forbes)

As a result of numerous malware attacks, 16b logins and passwords were compromised.

▪ 30 databases were found (sold on the darknet) - from tens of millions to 3.5b accounts in each.
▪ Apple, Facebook, Google, GitHub, Telegram and government services accounts were affected.
▪ This is not a recycling of old leaks - the data is fresh and ready for use by attackers.
▪ The information in the databases is structured in the format: URL + login + password.

🔑 How to protect yourself:

▪ Change passwords on all important accounts.
▪ Enable two-factor authentication wherever possible (2FA).
▪ Create unique passwords for each service.

@Сryptoz ₿

#breaking #scam
❌ At night, hackers hacked into the Abstract Chain Twitter account - they PRed the SCAM token.

Recently, access to the account was restored.

@Сryptoz ₿

#scam #breaking
🚫 Hyperliquid SCAM site detected in Google’s advertising block - Scam Sniffer

Phishing ads are designed to empty crypto wallets - malware is usually introduced into such fake sites.

@Сryptoz ₿

#scam #breaking
⚠️ Large-scale crypto attack through Firefox extensions!

More than 40 malicious extensions disguised as popular crypto wallets were found in the Firefox browser - MetaMask, Trust Wallet, Phantom, Coinbase, Exodus, OKX, etc.

• Extensions steal private keys directly from wallet sites.
• Transmit data and IP addresses to the servers of intruders.
• Visually indistinguishable from the originals - the same names, icons, interface.
• Collect hundreds of fake reviews to build trust.

❕Install extensions only from trusted developers.

@Сryptoz ₿

#scam #breaking
❌ Hackers launched advertising of fake crypto applications to a multi-million audience.

The cyber company Check Point disclosed the JSCEAL operation - since March 2024, fake ads under the guise of Binance, MetaMask and Kraken have been distributing malware.

➥ Advertising leads to fake sites with infected software.

➥ After installation, the virus steals:
- Passwords and seed phrases.
- Telegram data.
- Access to crypto wallets.

➥ Also modifies extensions (e.g. MetaMask) to steal funds.

➥Coverage: More than 10,000,000 users worldwide.

@Сryptoz ₿

#breaking #scam
❌ Hackers have learned to hide malware in ordinary photos.

The North Korean group APT37 sends ZIP archives with «innocent» files.

When opened, a virus is activated that steals documents, takes screenshots and accesses Dropbox, Yandex.Disk and other cloud services.

@Сryptoz ₿

#scam
⚠️ Hackers attack Ethereum addresses updated according to the EIP-7702 standard (Scam Sniffer)

Instead of old «approvals», packet transfers disguised as ordinary exchanges through Uniswap (Universal Router) are now used.

Everything looks legitimate until it’s too late.

@Сryptoz ₿

#scam #breaking #aave
🚫 Aave SCAM site detected in Google’s advertising unit - PeckShieldAlert

Phishing ads are designed to empty crypto wallets - malware is usually introduced into such fake sites.

@Сryptoz ₿

#breaking #scam #puffer
❌ Hackers hacked the Puffer Finance website and social networks (warning)

DO NOT interact with project applications and do not click on links in their official channels.

@Сryptoz ₿

#scam #breaking #wlfi
🚫 Hackers steal WLFI through the EIP-7702 vulnerability (SlowMist)

✦ Immediately after the launch of WLFI, there were complaints: tokens fly away from the victims’ wallets.

✦ The «classic exploit EIP-7702» is used - hackers introduce a malicious contract into the address in advance, and as soon as the tokens enter the wallet, they are immediately written off by the hacker.

✦ The victims write in social networks that they have to withdraw funds in a race with bots. Someone managed to save only 20% of WLFI, the rest hung in the compromised wallet.

@Сryptoz ₿

#scam
😟 And this happens: The hacker who hacked UXLINK fell for phishing himself and lost 542,000,000 #UXLINK ($48m).

P.S. In total, the attacker stole 490,000,000 UXLINK ($45m) and crushed another 2,000,000,000 UXLINK ($187m).

@Сryptoz ₿

#scam
⚠️ Fraudsters disguise themselves as Coinbase and advertise a fake «partnership» with the password manager Dashlane (warning)

DO NOT install any extensions and DO NOT click on the left links.

@Сryptoz ₿

#scam #bnb
❌ PeckShield: Oracle creators on the BNB blockchain scolded investors and deleted their Twitter account.

Number of victims = 1431.

@Сryptoz ₿

#mon #scam
⚠️ The co-founder of Monad warns about a scam in Telegram! (Original)

Telegram allows you to place ads aimed at individual public channels.

The fraudsters took advantage of this and posted a SCAM post directly in the official Monad Announcements channel.

@Сryptoz ₿

#scam #breaking
❌ Scam in the comments on Polymarket - scammers have already stolen $500,000+.

How the scheme works:
• Attackers buy «Yes» and «No» best from different accounts to be displayed in the Holders filter.
• They throw a disguised link to a fake site under the Polymarket logo, ask for a login by email and show pseudo Cloudflare.
• The Copy button pushes a malicious command for the terminal, which downloads and instantly launches the script, steals the crypt, data and access.

Scammers’ wallets: 1 , 2

@Сryptoz ₿

#mon #scam
⚠️ Monad users are attacked with fake translations.

The company’s technical director James Hansaker warned that attackers are trying to substitute addresses to intercept real user tokens.

How the scheme works:
• Fraudsters create vanity addresses that coincide with the first and last characters of the victim.
• Send zero fake transfers to get into the transaction history.
• Expect that the victim will copy this fake address at the next bridge or transfer and send real tokens to it.

@Сryptoz ₿