New cryptocurrency scanner: Fraudsters put Google Ads on top of Google Search who imitate popular wallets and forums.
A new scam has emerged, with cybercriminals using Google Ads to steal cryptocurrency wallets. Fraudsters place ads on Google Search that mimic popular wallet products, such as Phantom and MetaMask, to trick users into getting rid of their crypto wallet password and private key, reveals a study by Check Point Research (CPR).
CPR, in its blog post, notes that in order to lure its victims, fraudsters have placed Google Ads at the top of Google Search, which mimics popular wallets and forums. The company estimates that more than $ 500k crypto was stolen in a few days.
How the scam works
The scam puts a Google ad that appears first in a crypto wallet-related search query. After the victim clicks a malicious link that appears as a Google ad, the victim navigates to a criminal website to steal sensitive information that looks similar to the original wallet website.
A fake website is now trying to steal your login clause, if you already have a wallet; or will provide you with a new entry code for your newly built wallet. Either way, the scam gets access to your wallet and can continue to steal all your crypto money.
The entry clause creates an extra layer of security for your accounts and serves as a two-factor authentication for crypto-wallets. But if you give it to cyber criminals, your account will be compromised.
Oded Vanunu, Head of Dangerous Products Research at Check Point, in a statement, said, “I believe we are in a new era of cybercrime, where fraudsters will use Google Search as a key attack to access crypto wallets, instead. for the theft of sensitive information via email. To our knowledge, each ad had a careful message and keyword selection, to stand out in the search results. Criminal theft websites are sensitive where victims were targeted for displaying careful copying and copying of text messages. And even more shocking is the fact that many fraudulent groups are looking for keywords in Google Ads, which may be a sign of the success of these new phishing scams aimed at looting crypto wallets. "
How you stay safe
CPR urges the crypto community to remain vigilant and provides safety tips for people on how to stay safe.
1. Check the browser URL, before clicking any link. The lock symbol must be there in the URL.
2. Look at the extension icon. The extension will contain an extension icon next to it and a chrome extension URL. Only the extension should create an entry phrase, and to understand that this extension or website always checks the browser URL.
3. Users should never provide their login clause, no one should ask for that. And it should be used again only when you install a new wallet.
4. Skip ads. If you are looking for wallets or crypto trading and exchanging platforms in the crypto space, always look for the first website in your search and not in the ad, as this may mislead you into being deceived by attackers.
Comments
Post a Comment
Go text