Attackers stole more than $15 million in bitcoin, Ethereum, USDT and other cryptocurrencies through the fake website of the HitBTC exchange, SlowMist experts found out.
🚨MistTrack Scam Alert🚨
Fake site: hitbt2c[.]lol
Real site: hitbtc[.]com by @hitbtcThis scammer has stolen more than $15 million, including $BTC, $USDT, $ETH and other currencies. pic.twitter.com/i032uASW7y
— MistTrack🕵️ (@MistTrack_io) May 15, 2023
The company’s specialists noted that the phishing site uses three methods to steal cryptocurrencies from users:
- if the connection of the wallet is approved, the scammers get unlimited access to assets in USDT;
- like a real exchange, the site offers to make a deposit to the address of scammers (the function supports BTC, ETH and TRON);
- as in many similar cases, the digital signature field appears automatically, and when you click the “Confirm” button, the victim is deprived of all assets in Ethereum.
3⃣Like many phishing sites, the signature box pops up automatically. Once you click “Confirm”, your ETH will be stolen. pic.twitter.com/tpiAB0GP9g
— MistTrack🕵️ (@MistTrack_io) May 15, 2023
The latter method was used by unknown people who launched a phishing advertising campaign for crypto projects like Lido, DeFi Llama and Zapper in the Google search engine, with which they stole $ 4.16 million. Back in October 2022, Binance CEO Changpeng Zhao indicated that the service promoted such fraudulent sites.
Recall that in February, attackers stole $300,000 using the fake website of the famous Ethereum conference.
Found a mistake in the text? Select it and press CTRL+ENTER
Cryplogger Newsletters: Keep your finger on the pulse of the bitcoin industry!
