Using the name atomic, scammers are trying to attack crypto users with viruses..

[ScamViruS]

Today I received an email from this newsatomic@yahoo.com email address, at first I thought it might be a news of atomic wallet but in reality I saw something else. They are promoting Uniswap's fake giveaway through this email. They have given a form in the email that the participants have to fill up to get airdrop, and the scammers have taken advantage here. This is because the participants have to download an app to complete the form, and the scammers have attached a virus to that app. As a result, those who download the app, their system may be hacked.

Website:

Code:

https://get-uniswap.com/

Virustotal shows that the file contains viruses which is very risky for the system. Many may have already downloaded it which may later lead them to the Big danger. Because many have put themselves in danger by falling into the trap of tempting offers.







VirusTotal: https://www.virustotal.com/gui/url/2ba39eb153d4b5b21c5286f97edda980f0bbe35c0ce248725c5da43e2b57d27d/detection

[1714126970]

1714126970

[1714126970]

1714126970

[Bitcoin_Arena]

It looks like it's now a common trend. I, too, received a mail in one of my emails I used to use for registering in crypto related site like ICO platforms. Not sure how they got it but it could have been through some leaked email database.

This time round the message was sent from "Kraken News"

Code:

n.kraken@yahoo.com

But in the instructions, it's pretty much the same as your message.

It all winds up with this new domain that's hosting the malware just like in your case

Code:

https://uniswapclaim.com

I have reported the message in the email as phishing, you should do the same.

[erikoy]

Phishing site I guess. The link was a google docs to which I think it will ask you the details of your digital wallet and its private key or password. There are many kinds of phishing and we should know at least the basic of it.

In this case it is using email and the method use was dragnet method. You can check the other ways or method of how the hackers on hownto phished out their victims here take a look on this thread. https://bitcointalk.org/index.php?topic=5275049.msg55173846#msg55173846

[GreatArkansas]

I am curious why they were able to use the yahoo.com domain?
Is it yahoo.com is compromised?

Jeez, scammers are started to spread again. And they have another way to let people know, they know the trend, airdrops or some DeFi things that people will easily fall to their trap.

[nc50lc]

I am curious why they were able to use the yahoo.com domain?
Is it yahoo.com is compromised?

It's easy actually, register to yahoo mail and you'll have your "@yahoo.com" email .
That's basically the same when you register to google mail, you'll get an "@gmail.com" email.

[akirasendo17]

This is why it very important for us to know how to read the header, because of you only check buy opening the email you will be trick that the email is legit, and then you will probably click the link knowing that its not harmful and before you know it you already infected with types of malwares etc.
so how to know if an email is disguising as a email that you have know?
in this example:

1. you have to look for the email address in the header this is very important

mostly it will show a legitimate email in front but at the back its a different email
if its correct but still you have dooubts

2. Try to ask the sender if he/she send an email with that link of something suspicious.

3. Never click the link no matter what , specially if you don't know what is happening, delete it if he/she confirms he does not send anything.

4. Warn your friend to scan his / her pc because its going to get worse it will send emails to everyone which means disaster.

lastly always be updated on what is happening in the web , so that you know what to do

Hope this helps

[Coyster]

I am curious why they were able to use the yahoo.com domain?
Is it yahoo.com is compromised?

There is no 'special' or strict security protocol required before you can create a Yahoo email address (neither is the domain even security conscious) and the website doesn't have to be hacked or compromised. Mind you that when the scammers create their scam email addreses, it's not possible for the website (domain) to know their intent and that it'll be used to spread phishing links, that's why it's important to report this addresses so they could be marked as a scam email address.

2. Try to ask the sender if he/she send an email with that link of something suspicious.

Imo, just deleting the message and reporting the address is the best thing to do. If you want to confirm whatever was the content of the mail, go through the official website of the company, exchange, wallet etc the scammer was impersonating.

[Godwinpaul]

Receiving deceptive mails of this nature is quite popular. On looking at such mail, one ought to know that atomic wallet can't be sending such a mail with a yahoo mail. We need to understand that it's possible to create a yahoo account with any name as long as its not in use by someone else.

[ScamViruS]

Receiving deceptive mails of this nature is quite popular. On looking at such mail, one ought to know that atomic wallet can't be sending such a mail with a yahoo mail. We need to understand that it's possible to create a yahoo account with any name as long as its not in use by someone else.

Lots of new users are not aware of this. Because they are tempted to accept tempting offers without noticing anything. Scammers know very well that a large part of those who are targeting these emails will fall into this trap.

Those who know that the purpose of this type of email is to scam, they ignore these offers, but those who do not know about this type of scam, they are at a big risk.

[khaled0111]

Scammers know that there are many who missed the uniswap airdrop and they know that many of them are desperately waiting for any new opportunity to get free money.
Too good to be true ain't going to work here as the uniswap airdrop was too good but true 

Besides reporting the email address and blacklisting it, is it possible to report the google form?

[ScamViruS]

Besides reporting the email address and blacklisting it, is it possible to report the google form?

Yes you can report the form. I think this would be the best way to delete this scam form. This will save many innocent new crypto users from falling into the trap of these scammers. The way to report, I give with the link....

https://support.google.com/docs/answer/2463296?hl=en

[tbct_mt2]

People are too stupid to be scammed with those domain names and email addresses.

- Website domain names with suspicious texts before the exchange names are untrusted. It is first thing to keep your eyes open up and recognize scam sites.
- Email addresses: If I am from Kraken, my email address would be

Code:

myname@kraken.com

It is an example. @kraken.com at the end is a must because the domain name of legit site is https://www.kraken.com

[Neolance123]

Phising and many others scams became so easy (and probably profitable) because of the massive number of unaware people eager to earn. Not to mention that most are always trying to find the 'easiest way through' in earning forgetting the fact that it shouldn't or isn't always work like that.

Quoting this (obviously from OP himself):

Lots of new users are not aware of this. Because they are tempted to accept tempting offers without noticing anything. Scammers know very well that a large part of those who are targeting these emails will fall into this trap.

I totally agree. Only the wiser would overcome such certain traps and would always aim for plausible opportunities.

[ScamViruS]

Phising and many others scams became so easy (and probably profitable) because of the massive number of unaware people eager to earn. Not to mention that most are always trying to find the 'easiest way through' in earning forgetting the fact that it shouldn't or isn't always work like that.

People give their entire system under the control of hackers to earn some free income! But they do not think that there is nothing free in the world. If someone sends an email with the promise of some kind of free money, then it is a completely fake email. Newcomers to the crypto market take some time to experience such scams. This type of scam still works, so scammers are constantly coming up with these scams. So everyone should be a little extra careful.

[aioc]

I am curious why they were able to use the yahoo.com domain?
Is it yahoo.com is compromised?

Jeez, scammers are started to spread again. And they have another way to let people know, they know the trend, airdrops or some DeFi things that people will easily fall to their trap.

Well, I have three Yahoo email for personal use but that doesn't mean I bought Yahoo.com they do not have a dedicated name for their email services that is why those who do not have a yahoo email will have suspicious, same thing with msn.com I used to have a msm.com email way back but right now it's all gmail.

[masulum]

I am curious why they were able to use the yahoo.com domain?
Is it yahoo.com is compromised?

I think this not because yahoo compromised, OP just shared about scammers using yahoo.com email to send email about their fake airdrop. yahoo mail still active even some of their service has been shutdown. Since user not uploading the software through their email, so this kind of viruses email will not detected. Any white list documents such as google docs or one drive shared links will not detected as malicious email, we as user need to recheck what URL under hyperlink before execute it.