Hey all,

I recently have been researching scams and fraud in cryptocurrency, mainly focusing on client side fraud (meaning when the end user is attacked) - such as phishing (fake exchanges, ICOs), wallet theft malware, wallet switching malware and other scams.
Every now and then we read about this in the media or around social media - Phishing campaign stealing millions USD worth of BTC from fake exchange site, cryptoshuffler stealing $150,000 by switching wallet addresses and more.


Can anybody who has gone through such an experience or knows someone who has, whether defrauded or not, shed some light on this scene?
Like how did it happen? How much money was stolen if at all? When did you notice it happened?


This will really help us make our new crypto security chrome extension (CryptoFence) even better - our goal is to add as much features as possible to secure the crypto space from scams and fraud.

Thanks guys

Hey everyone,

We are 2 security researchers and developers, who decided that it's time to give back to the community and help fight scams and threats in the Crypto sphere..

CryptoFence is a new free Chrome Extension that protects users from Cryptocurrency Phishing scams and Wallet Address Swapping Malware (WASM). The extension uses real-time monitoring paired with an advanced proprietary heuristic risk engine. Each page you browse is constantly monitored to detect behavioral properties that may indicate it is malicious. One of the key advantages of CryptoFence over other solutions is that it detects exchange phishing sites due to heuristics and not blacklists (which take time to include new phishing sites)


Threats we currently protect from

• Exchange Phishing Sites - The #1 threat, these sites steal all information (including 2FA codes and tokens) needed to take over your exchange account, using social engineering techniques. These sites are promoted to victims by email, crypto communities and google promoted ads, claiming to be the original exchange.
  
• Wallet Address Swapping Malware such as CryptoShuffler, Eviral and Coinbitclip. These are viruses that simply switch copied addresses to the attacker’s wallet address, therefore resulting in the victim sending funds to the wrong wallet.
  

Next release will include: ICO Phishing scam sites claiming to be the original ICOs.


CryptoFence vs other solutions
CryptoFence uses a proprietary Anti-Phishing and Anti-WASM engines that protect users from these ever-rising threats in the cryptosphere.

• CryptoFence vs other Anti-Phishing solutions
  Other available Anti-Phishing solutions use blacklist-based detection. While very accurate, these types of solutions are weak and outdated. The reason being is the time it takes to update the blacklist. Before "making the blacklist", a phishing site first needs to be detected and reported, then analyzed and confirmed, and finally added to the list. The process may take anywhere from days to weeks from emerging to being listed and detected. Meanwhile, users are exposed to the attack.
  CryptoFence doesn't require any time in order to detect threats, since it uses a heuristic engine that identifies Phishing threats by their properties.
  
• CryptoFence vs Anti-Virus solutions for WASM Detection
  A Wallet Address Swapping Malware is a rather simple virus that infects a PC and modifies Crypto Wallet Addresses copied to the clipboard. This simple switch results in painful losses, due to the funds being sent accidently by the victim to the fraudster behind the virus. Anti-Virus software may be effective in combating know variants of the attack by employing known variant signatures, seen in the past. But what happens when a newly encrypted WASM variant emerges and the AV has yet to bump into it. In this case, the AV may detect the malware if it has the relevant heuristic capabilities and configuration or it may miss it until it is discovered or signed by a different vendor. CryptoFence, on the other hand, uses a proprietary behavioral engine that identifies the malicious activity itself, regardless of the variant behind it.
  

Try It
CryptoFence is currently in Beta and available for initial evaluation on the Chrome Store.
You can get it on:
CryptoFence's official website at https://cryptofenceapp.com
Google Chrome Store: https://chrome.google.com/webstore/developer/stats/mbbhmeaigkhegcfplchceemgblboedcd


More information available on this blog: https://steemit.com/crypto/@bonzi/cryptofence-advanced-crypto-threat-protection


We'd really love your thoughts on our project, other features you think will be helpful in combating crypto threats, sites you want to add as secure sites and more.

Bonzi

Joined
Good luckk

Hey guys,

Does anyone here happen to have a synced MMC client? Syncing takes forever. I see the MMC community used to have a daily blockchain snapshot out in their forum. That's dead.
Can anyone here upload an up to date snapshot?

Thanks