
Cryptocurrency Scam Uses Fake Reviews to Appear Trustworthy
Criminals created fake positive reviews across multiple websites to trick people into downloading software that steals cryptocurrency from their computers.
Source
Dark Reading
Original headline: Crypto Heist Fueled by Elaborate Fake Reputation-Boosting Campaign
Plain-English summary by GetCyberRight. Read the full report at the source above.
Scammers orchestrated an elaborate scheme to steal cryptocurrency by building fake credibility across the internet. They posted malicious software on multiple platforms including GitHub, YouTube, and VirusTotal, then created numerous fake positive reviews and endorsements to make the software appear legitimate and safe. The software they distributed is a clipboard hijacker, which secretly changes cryptocurrency wallet addresses when victims try to copy and paste them, redirecting funds to the criminals instead. This affects anyone who owns cryptocurrency and uses their computer to make transactions. The scam is particularly dangerous because it targets people across different devices and operating systems. When you copy a cryptocurrency wallet address to send money, the malware secretly replaces it with the attacker's address. Your transaction then goes to the criminal instead of your intended recipient, and cryptocurrency transactions cannot be reversed.
If you own any cryptocurrency, take these steps immediately:
- Never download cryptocurrency-related software based solely on reviews or recommendations, even if they appear on multiple trusted sites.
- Always double-check the wallet address after pasting it, comparing every character to ensure it matches what you intended to copy.
- For large transactions, send a small test amount first to verify the address is correct.
- Only download cryptocurrency wallet software directly from the official website of established, well-known providers.
- Run updated antivirus software and scan your computer if you have recently downloaded any cryptocurrency tools. This scam demonstrates that criminals are willing to invest significant time building false trust. Fake reviews can appear anywhere, including sites you might consider reliable. When dealing with anything financial, verify everything independently. Never rush into downloading software because it has good reviews. Treat your cryptocurrency with the same caution you would treat a large amount of cash, because once it is gone, there is no way to get it back.
Curated from trusted cybersecurity sources by GetCyberRight
Source: Dark ReadingStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles
WhatsApp Users Are Getting Hacked Through Fake Business Documents
Scammers are sending fake invoices and business files on WhatsApp that install malware on your computer. Here's how to spot them and stay safe.
4 min readWhatsApp Scam Alert: Fake Business Documents Install Spyware on Your Device
A new WhatsApp attack tricks users into opening fake business documents that install remote access malware. Here's how to protect your family right now.
3 min readGovernment SAVE Database Ruled Illegal and Ordered Shut Down
A federal court ruled the government's SAVE database violates privacy laws. Here's what families need to know and do now.
3 min readCritical FFmpeg Flaw (PixelSmash) Threatens Popular Media Apps
A serious security flaw in FFmpeg could let attackers take control of media applications millions use daily. Here's what you need to know and do.
3 min read