A crypto trader lost more than $ 2.5 million to Tether (USDT) after he had fallen twice for the same scam within a few hours.
On 26 May, Blockchain Security Firm SCAM Sniffer reported that the first mistake took place when the trader copied a manipulated wallet address from their transaction history. This resulted in a transfer of $ 843,000 to the scam address.
Only a few hours later the trader repeated the same mistake and sent another $ 1.7 million to the same fraudulent address.
The attack method, known as address poisoning or history poisoning, includes scammers who send small transactions from wallet addresses that look strongly like legitimate. These fake transfers are designed to appear in the transaction history of the victim.
If the user later tries to copy the address of a recipient from that history, they will probably select the malignant version and unconsciously send money to the scammer.
These exploits are increasingly common, because attackers focus on crypto users via subtle, low-in-chord techniques that depend on user error and interface living.
Arches and Social Engineering Risks
Hackers have developed their methods to direct users more directly. Blockchain -security company Slowmist emphasized a growing wave of SMS -Phishing campaigns.
In this scams, malignant actors usually send messages that occur as crypto exchanges such as Coinbase, who falsely claim a problem with an infringement of the withdrawal or safety.
The victims are then instructed to call a support number in the message. If they do that, they are connected to a fake agent who leads them to a phishing website. On the website, users would be asked to introduce their recovery or mnemonic sense, giving hackers full access to their crypto portfolios.
According to Blockchain analyst Zachxbt, this Social Engineering -Tactics Coinbase users have already cost more than $ 300 million.
In view of this, Slowmist advises strong crypto users to prevent the sharing of recovery sentences, to ignore unsolicited texts or calls and to verify all communication via official websites or apps.
