phishing via governance proposals

[libert19]

Ok, so I think this is relatively 'new' method to scam users, so will put it here.

Basically, fake governance proposal alluring user to go on phishing site and give up seed/pvk.



This is virus total:



These were posted on Osmosis governance, and now appears to be removed.

Source: Reddit

[1715166242]

1715166242

[1715166242]

1715166242

[Rruchi man]

Thank you so much for sharing this is relatively new and for readers here in the forum this will be helpful for them not to fall victim to this new technique from scammers. Like I would always say scammers can be relentless in their efforts to steal your cryptocurrency we owe it to ourselves to stay informed so as not to be fooled by any of their new technique. I urge all the forum members here to constantly share any new method used by scammers that they discover so that the community can constantly be up-to-date.

[tranthidung]

Some points

• I am not sure why they received such airdrop messages together with strange links
• Assume airdrop is really happening, let's consider the given link. It should be not from any official project with a domain link .xyz.
• Assume people carelessly skip the first preventive step, they should not skip the second preventive step with domain link
• They can easily to double check by typing the project name (Osmosis in this case) on either Coinmarketcap.com or Coingecko.com and get official website link then compare it with the given link in received messages

[libert19]

Some points

• I am not sure why they received such airdrop messages together with strange links
• Assume airdrop is really happening, let's consider the given link. It should be not from any official project with a domain link .xyz.
• Assume people carelessly skip the first preventive step, they should not skip the second preventive step with domain link
• They can easily to double check by typing the project name (Osmosis in this case) on either Coinmarketcap.com or Coingecko.com and get official website link then compare it with the given link in received messages

1. It's public governance page.

If people were to actually check things as mentioned, scammers would have to find jobs.