cryptoscamalert

#CryptoScamAlert По словам специалистов по безопасности, новый вирус распространяется через поддельные объявления о вакансиях, а на устройстве жертвы маскируется под фоновую службу. У пользователей могут быть похищены приватные ключи, seed-фразы криптокошельков и API-ключи бирж.
«ModStealer не обнаруживается популярными антивирусными решениями. В отличие от традиционных вредоносов, ModStealer выделяется поддержкой нескольких платформ и скрытой цепочкой выполнения с нулевым обнаружением», — рассказали эксперты Mosyle.
Вся похищенная информация уходит на удаленные серверы, а на macOS программа закрепляется как «помощник» и запускается при каждом старте системы. ModStealer представляет серьезную угрозу для всей экосистемы цифровых активов, считают специалисты Mosyle.
Ранее эксперты специализирующейся на кибербезопасности компании Aikido Security сообщили, что хакеры взломали NPM — реестр пакетов (библиотек) для программного обеспечения на JavaScript, а затем загрузили вредоносную программу ради кражи криптовалют путем подмены адресов кошельков и перехвата транзакций.

The cryptocurrency landscape, already rife with scams and schemes, has witnessed a bizarre new development: scammers are now falling prey to elaborate traps set by their own kind. This ironic twist, recently highlighted by Kaspersky's security research, reveals a level of cunning that even seasoned cybercriminals might find impressive. This isn't just a simple trick; it's a meticulously crafted operation designed to exploit the greed of would-be thieves.
The Bait: A Cry for Help and a "Vulnerable" Wallet 🥺💰
The scam unfolds primarily on platforms like YouTube, where seemingly innocent pleas for help are posted. These messages typically involve a supposed cryptocurrency novice claiming to have USDT (a stablecoin) stored in a wallet, along with the all-important seed phrase. A seed phrase, a series of words acting as a master key 🔑, grants complete access to a cryptocurrency wallet.
Kaspersky provided an illustrative example: "I have USDT stored in my wallet, and I have the seed phrase. How do I transfer my funds to another wallet?" The "wallet" in question purportedly holds over $8,000 worth of stablecoins on the Tron blockchain. This seemingly naive question is the carefully laid bait.
The Trap: The Multi-Signature Wallet and the Vanishing Gas ✍️✍️⛽💨
The key to this elaborate trap lies in the use of a multi-signature wallet. Unlike a standard wallet, a multi-signature wallet requires multiple authorizations for any transaction to occur. This crucial detail is what transforms the attempted theft into a counter-scam.
To understand the mechanics, it's essential to grasp the concept of "gas." On blockchains like Tron, every transaction requires a small fee, known as gas, paid in the network's native cryptocurrency (TRX). This fee compensates the network for processing the transaction.
The scammers present a wallet that appears vulnerable due to the shared seed phrase. When opportunistic thieves attempt to exploit this "vulnerability" by sending TRX to cover the gas fee needed to move the USDT, they fall into the trap. The TRX tokens, instead of enabling the transfer of USDT, vanish into a separate wallet controlled by the original scammers.
How it Works: Exploiting the Mechanics of Blockchain 🎭
The brilliance of this scheme is in how it exploits the fundamental workings of blockchain technology. While the seed phrase grants access to see the contents of the wallet, the multi-signature requirement prevents any unauthorized movement of the funds. When a would-be thief attempts a transaction, the multi-signature protocol diverts the gas fee (TRX) to the scammers' wallet.
Essentially, the scammers are using the multi-signature function as a digital tripwire. Any attempt to tamper with the "vulnerable" wallet triggers the transfer of the gas fee to their control. The aspiring thieves, thinking they've found an easy score, inadvertently fund the very scam that ensnares them.
Digital Robin Hoods or Just Scammers Scammed? 🏹⚖️
Kaspersky describes this situation as a twisted form of digital justice: "The scammers are impersonating beginners who foolishly share access to their crypto wallets, tricking equally naive thieves — who end up becoming the victims." This creates a strange dynamic where the scammers are effectively stealing from other criminals.
This phenomenon is not isolated. Kaspersky has observed numerous similar instances online, with new accounts repeatedly posting identical messages and using the same seed phrase as bait. This suggests a coordinated campaign rather than isolated incidents.
Targeting Small-Time Crooks 💸➡️😈
Given the relatively low cost of gas fees (typically less than $10 on most blockchains), this scam likely targets smaller-time scammers or "wannabe" thieves. It's not about orchestrating complex heists to steal vast fortunes; it's about capitalizing on the greed and opportunism of those looking for a quick and easy profit.
The Bigger Picture: A Reminder of the Crypto Wild West 🌐😈
This bizarre scenario underscores the inherent risks and complexities of the cryptocurrency world. Where anonymity and decentralized control prevail, even criminals are not immune to being targeted. This incident serves as a stark reminder that vigilance and skepticism are paramount, even within the criminal underworld of crypto.
The volatility and lack of robust regulation within the crypto space continue to create fertile ground for scams of all kinds. This latest iteration is a testament to the ever-evolving tactics of cybercriminals. As the old adage goes, there's no honor among thieves, especially in the digital age. This sophisticated scam highlights that even in the digital underworld, the hunter can quickly become the hunted.
#CryptoScamAlert

In 2017, the disappearance of 50 BTC might have seemed like a relatively small case. But today, this stolen stash is worth a staggering $4 million! And the shocking part? The suspect is an officer of the UK’s National Crime Agency (NCA), the very institution responsible for fighting organized crime.
Crime Within the Law – NCA Officer Accused of Bitcoin Theft
According to official reports, Paul Chowles (42) from Bristol has been charged with 15 criminal offenses, including theft, money laundering, and possession of criminal property.
The officer allegedly diverted 50 BTC into his own account during an ongoing investigation into online organized crime in 2017. At the time, the stolen Bitcoin was worth just $77,000, but today, it could cost him his career – and possibly his freedom.
Chowles is set to appear before Liverpool Magistrates’ Court on April 25, 2025, where the verdict on his case will be decided.
Why Is This Case So Shocking? ⚖️
1️⃣ Bitcoin turned into a treasure – Back in 2017, it was a relatively “small” catch, but today, it could buy him a luxury house in London. 😲🏡

2️⃣ A theft from within law enforcement – If proven guilty, this would be a major ethical scandal, raising concerns about the integrity of the UK’s crime-fighting agency.

3️⃣ NCA can now seize crypto without arrests – In 2024, the NCA was granted new powers to freeze, seize, and destroy cryptocurrencies linked to criminal activity – no arrests needed.
What Is the NCA, and Why Does This Matter?
The UK’s National Crime Agency (NCA) is responsible for tackling serious crime – from cybercrime to financial fraud. It’s meant to protect the public from illegal online activities, yet now, one of its own officers is accused of abusing his position for personal gain.
What Happens Next? ⏳
🔹 If Paul Chowles fails to defend himself in court, he could face serious consequences.

🔹 This case could impact crypto regulations in the UK, especially regarding oversight of agencies investigating cryptocurrencies.

🔹 What about the stolen BTC? Are they still in circulation? Or have they been transferred to an undisclosed account?

#CryptoCrime , #bitcoin , #CryptoNewss , #crypto , #CryptoScamAlert
Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“

Hackers Exploit Orange Finance Platform
Orange Finance, a major liquidity manager on the Arbitrum network, suffered a hacking incident resulting in the theft of $840,000. The Orange Finance team announced the breach on January 8 via X, urging users to avoid interacting with the protocol.

Details of the Attack
According to the team, the hackers gained control of the administrator address, upgraded the contracts, and transferred the funds to their wallet. The team confirmed that the contracts are no longer under their control and noted that they currently lack precise details about the attack.
Message to the Hacker
In a subsequent statement, the Orange Finance team revealed they contacted the hacker via an on-chain message. They requested a "positive response within 24 hours" and offered to handle the situation as a "white hat" matter without involving law enforcement agencies.

Funds Converted to Ethereum
Blockchain analytics firm Cyvers Alert reported that the hacker had already swapped the stolen funds for Ethereum (ETH). The Orange Finance team continues to investigate the incident and has advised users to revoke all contract approvals linked to Orange Finance to ensure their safety.
A Significant Loss for Arbitrum’s Largest Liquidity Manager
Before the attack, Orange Finance was the largest liquidity manager on the Arbitrum network, with over $1.5 million in total value locked, according to data from DefiLlama. This incident is a major blow to the platform’s operations and reputation.
Conclusion
The hack on Orange Finance highlights the risks associated with decentralized finance protocols. Users are urged to secure their funds and regularly review contract approvals to prevent similar incidents. The Orange Finance team is working to investigate the breach and recover the stolen funds.

#HackerAlert , #CryptoFraud , #CryptoScamAlert , #CryptoNewss , #HackerNews

Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“

Investors Face Risks from Fee-Related Scams
Cypriot authorities are urging the public to exercise caution after a 50-year-old man from Limassol lost $58,000 to a fraudulent cryptocurrency trading platform. This incident highlights the growing prevalence of manipulative tactics used in crypto market scams.
How the Scam Unfolded
Fake Platform with a Professional Appearance
The victim encountered a website in December that appeared to be a legitimate trading platform. It featured detailed charts, interactive dashboards, and tools for tracking profits. Lured by the professional design and promises of high returns, the man invested a total of $58,000 across multiple transactions.
Manipulated Data and Illusions of Profit
The scammers used a manipulated dashboard to display fake rising profits. This common tactic creates the illusion of successful investments, encouraging victims to continue depositing funds.
Demands for "Additional Fees"
When the man attempted to withdraw his supposed earnings, the scammers refused to release the funds, instead demanding additional fees to "unlock" the profits. This tactic, known as an advance fee scam, involves pressuring victims to pay more money under false pretenses, only to leave their funds inaccessible.
Recommendations from Authorities and Additional Warnings
Caution in Investing
The Cypriot Financial Crime Investigation Bureau advises against sharing sensitive financial and personal information and recommends investing only through licensed and reputable institutions. They also emphasize the importance of verifying the credibility of any advisor or platform.
Other Crypto Scam Incidents
Similar warnings have been issued by U.S. financial authorities. For instance, in June 2024, another investor lost $310,000 through a fake platform called Ethfinance. Scammers employed similar tactics, leveraging manipulated data to deceive victims.
More Sophisticated Scams
In July, another scam was uncovered where fraudsters offered fake loans. Victims were convinced their trading account profits would cover the loan repayments. However, the victims ended up repaying the loans from their own pockets while their supposed earnings remained locked on the platform.
Summary
This case from Cyprus underscores the risks of investing in cryptocurrencies through unverified platforms. Police and financial authorities warn against scammers who manipulate data and exploit investor trust. Exercising caution and thoroughly verifying investment opportunities are crucial for avoiding financial losses.

#CyberSecurity , #HackerAlert , #cyberattacks , #CryptoScamAlert , #CryptoNewss

Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“