Hey everyone,
We are 2 security researchers and developers, who decided that it's time to give back to the community and help fight scams and threats in the Crypto sphere..
CryptoFence is a new free Chrome Extension that protects users from Cryptocurrency Phishing scams and Wallet Address Swapping Malware (WASM). The extension uses real-time monitoring paired with an advanced proprietary heuristic risk engine. Each page you browse is constantly monitored to detect behavioral properties that may indicate it is malicious. One of the key advantages of CryptoFence over other solutions is that it detects exchange phishing sites due to heuristics and not blacklists (which take time to include new phishing sites)
Threats we currently protect from- Exchange Phishing Sites - The #1 threat, these sites steal all information (including 2FA codes and tokens) needed to take over your exchange account, using social engineering techniques. These sites are promoted to victims by email, crypto communities and google promoted ads, claiming to be the original exchange.
- Wallet Address Swapping Malware such as CryptoShuffler (https://www.kaspersky.com/blog/cryptoshuffler-bitcoin-stealer/19976/), Eviral (https://themerkle.com/evrial-malware-steals-bitcoins-by-changing-clipboard-copied-addresses/) and Coinbitclip. These are viruses that simply switch copied addresses to the attacker’s wallet address, therefore resulting in the victim sending funds to the wrong wallet.
Next release will include: ICO Phishing scam sites claiming to be the original ICOs.
CryptoFence vs other solutionsCryptoFence uses a proprietary Anti-Phishing and Anti-WASM engines that protect users from these ever-rising threats in the cryptosphere.
- CryptoFence vs other Anti-Phishing solutions
Other available Anti-Phishing solutions use blacklist-based detection. While very accurate, these types of solutions are weak and outdated. The reason being is the time it takes to update the blacklist. Before "making the blacklist", a phishing site first needs to be detected and reported, then analyzed and confirmed, and finally added to the list. The process may take anywhere from days to weeks from emerging to being listed and detected. Meanwhile, users are exposed to the attack.
CryptoFence doesn't require any time in order to detect threats, since it uses a heuristic engine that identifies Phishing threats by their properties.
- CryptoFence vs Anti-Virus solutions for WASM Detection
A Wallet Address Swapping Malware is a rather simple virus that infects a PC and modifies Crypto Wallet Addresses copied to the clipboard. This simple switch results in painful losses, due to the funds being sent accidently by the victim to the fraudster behind the virus. Anti-Virus software may be effective in combating know variants of the attack by employing known variant signatures, seen in the past. But what happens when a newly encrypted WASM variant emerges and the AV has yet to bump into it. In this case, the AV may detect the malware if it has the relevant heuristic capabilities and configuration or it may miss it until it is discovered or signed by a different vendor. CryptoFence, on the other hand, uses a proprietary behavioral engine that identifies the malicious activity itself, regardless of the variant behind it.
Try ItCryptoFence is currently in Beta and available for initial evaluation on the Chrome Store.
You can get it on:
CryptoFence's official website at https://cryptofenceapp.com
Google Chrome Store: https://chrome.google.com/webstore/developer/stats/mbbhmeaigkhegcfplchceemgblboedcd
More information available on this blog: https://steemit.com/crypto/@bonzi/cryptofence-advanced-crypto-threat-protection
We'd really love your thoughts on our project, other features you think will be helpful in combating crypto threats, sites you want to add as secure sites and more.
Bonzi
I have found very few reviews of this extension. Did anyone try it?