Crypto News: Crypto Industry Stunned by 40% Surge in Phishing Attacks
According to Cybersecurity firm Kaspersky, Phishing attacks were raised by 40% in 2022.
It is not just the common people and investors showing interest in the Crypto market, scammers are also intrigued by cryptocurrencies. They are also evolving along with the Crypto Industry. New and advanced techniques were implemented to steal users’ crypto data and currencies easily.
The crypto scams rose to 40% year-on-year growth with a surge of 5,040,520 detections of crypto phishing in 2022 compared to 3,596,437 in 2021. As per Kaspersky, every 7th user surveyed was affected by a crypto cyber-attack.
Crypto crimes include traditional ways like giveaway scams, fake wallet malicious pages, and rewards schemes. Kaspersky discovered that scammers are choosing new innovative techniques and approaches to steal cryptos easily.
Bitcoin- Mining Scam
This is the latest technique used by scammers to lure cryptocurrencies. The scammers first will send an email to the people with an attached PDF stating that “your Bitcoin cloud mining account has been inactive for one year with a total Bitcoins of 0.7495 BTC accumulated in the account”. Activate the account within 24 hours or else the account will get blocked permanently.
The pdf includes a link and when the users click on the link, they are directed to the so-called well-designed Bitcoin mining website with a welcome back note along with the IP address. They create an urgency to take an action by mentioning the time in big fonts with hours, minutes, and seconds ticking.
The website also provides other sections like monthly history, setting for changing passwords, subscriptions, auto-withdrawal, and send money options. When the user clicks on the payout option, a form appears to be filled including the user’s personal data like the card number. The site provides an option to convert Bitcoin into USD by paying a minimal commission of 0.25% ($64) which needs to be paid in cryptocurrency.
The user is then taken to a payment page including personal details and when the victim clicks on the pay button, a wallet address is provided to send the fee amount along with a barcode scanning option to send the fee.
The moment the victim clicks on the payment link, all the personnel details have been stolen by the attackers within no time. Before you know you have been hacked, your details will be available for sale on the dark web or your money has been stolen.
The Cryptocurrency Industry is not only a volatile market but also a scamming-prone Industry. Investors need to be more vigilant and should take the necessary steps to not be vulnerable to these traps.
types of Cryptocurrency scams
- Social Media scams
- Fake browser Extensions
- DNS hijacking
- Phishing Bots
- Spear Phishing- attacking specific individuals using messages like fake emails.
- Whaling attack- targets high-profile individuals.
- Crypto malware attack
Precautions to be taken to avoid Cryptocurrency Phishing attacks
- Don’t click on malicious links or websites as most scammers are using malicious emails and fake websites to lure people. Check for typos in the web address. Sometimes ‘o’ may be replaced by ‘0’ or there may be an extra word included along with the real company’s address name.
- Be attentive while clicking on links providing you with discounts, offers, or gifts. If you feel something fishy, just hover the mouse cursor on the link (avoid clicking accidentally) to see the web address. Then search the company’s official page and match it with the address. If it doesn’t match, stay away from it. Also, check if the official page offers the same discount mentioned in the mail.
- Check if the connection is secure and the certificate is valid through the Chrome web address field.
- You can bookmark frequently visiting sites to avoid clicking on fake pages.
- Don’t store your credit card information on any websites.
- Never share your private key details with anyone. Better store it in a hardware wallet.
- Investors need to be cautious and do proper research about the company’s project like Whitepaper, their team, social media channels, official website, token allocation, etc.
- Stay away from unrealistic offers and promises.
- Protect your wallet with two-factor authentication.
- Keep a note of fake ICOs, Fake Airdrops, and NFTs.
- Protect your devices and computer with antivirus software and keep your system up to date.
- Connect to secure networks only.
- Create a strong password and never share your recovery seed phrase with anyone.
- Before adding any browser extensions through the web store, check their profile page and their developer team, and have time to view the customer review. Always download from the official website.
- Do Not enter your credentials through email. Legitimate services do not ask for your login credentials.
- Be aware of the latest crypto threats, updates, and best practices in the crypto industry.
In conclusion, the increase in phishing attacks within the cryptocurrency industry is a serious concern that needs to be addressed. Not only does it pose a risk to financial security, but it also creates uncertainty about the integrity of cryptocurrency investments. Industry participants need to take steps to protect themselves from these malicious actors and their tactics.
