Warning ⚠️ there is a new hack that steals bank/crypto info on your phone

[Outhue]

I don't know if this is the right place for this, I need to warn people about a new trick that hackers are using to drain bank accounts and crypto wallet.

someone living next to me lost over 2000$ in his bank account and tokens in his metamask all wiped out..the last thing he did before he started receiving debit alert is opening a PDF sent to his mobile number, that's it.

The same PDF that's been sent to me several times and since the sender hidden their number I can't block them for good, I just knew it feels wrong downloading a PDF file that I wasn't expecting.

Many people have already became a victim, most are not into crypto and they are blaming the banks.



If you are from Nigeria 🇳🇬 be very careful, the hackers form any +234 numbers and send them this PDF file, there are more than 5 people within my area that have received the same PDF, there are too many news about money vanished from bank accounts that's why many people are scared now.

I have deleted this shit over 20 times already but the sender keeps sending it back, if you know how I can block the sender ( hidden number ) please do share. God bless

[mk4]

Re: Warning ⚠️ there is a new hack that steals bank/crypto info on your phone

While this is a more-clever scam compared to most, it's definitely not a new one. You can easily dodge this by simply not randomly download any file that's been unexpectedly sent to you — and better yet, not randomly open files.

[Upgrade00]

I am from Nigeria and I believe I have also received similar messages containing some sort of file for download from unknown numbers. They were of course promptly ignored and I blocked the number IIRC. I don't think I ever got a repeat of the message.

Your friend's loss is unfortunate and I hope he can recover from it. He should consider moving any left over assets on the device to a new one and wipe the device clean to prevent a reoccurrence.
Also advice him on having a separate device specifically for holding assets to prevent falling victims to malwares or phishing links.

[stompix]

I have deleted this shit over 20 times already but the sender keeps sending it back, if you know how I can block the sender ( hidden number ) please do share. God bless

Android? Depends on the version and if there are no custom things installed from the carrier itself but usually blocking unknown numbers from the call settings option> block numbers > block unknown numbers slider > will block messages too, at least on my phone. If that doesn't work you can install Truecaller!

But seriously, why would someone download and open a file received from a stranger? Just why?
This is no different than opening a spam email attachment!

[armanda90]

Difference cases in my country about hack or steal bank account assets due new application installed on our mobile phone, I am new with your method sharing about how possibility with pdf file sending to our mobile phone can loss all assets between bank and cryptocurrency have. Due our number participants in many kinds or airdrop I don't think how keep securing and make private it, actually in my country have new rule adopted for every one not allow having more than one mobile phone number.

Android? Depends on the version and if there are no custom things installed from the carrier itself but usually blocking unknown numbers from the call settings option> block numbers > block unknown numbers slider > will block messages too, at least on my phone. If that doesn't work you can install Truecaller!

Great way and I will try how to protect my phone number from unknow, usually many time I received call from financial insurance and your method will help me protect not received yet call from them.

[coupable]

someone living next to me lost over 2000$ in his bank account and tokens in his metamask all wiped out..the last thing he did before he started receiving debit alert is opening a PDF sent to his mobile number, that's it.
...
If you are from Nigeria 🇳🇬 be very careful, the hackers form any +234 numbers and send them this PDF file, there are more than 5 people within my area that have received the same PDF, there are too many news about money vanished from bank accounts that's why many people are scared now.

Hackers do not give up easily and every time they surprise us in unimaginable ways. But in this case it is surprising that they actually succeeded in draining the bank accounts since these transfers can be traced. Also, transfers are supposed to be confirmed via e-mail and phone number. Did they really succeed in breaching all these protection measures using the pdf file?

As for Metamask, there are warnings issued a week ago about a new scam method called "address poisoning", which makes the victim send crypto to another address of the hacker, different from the original address he wants to send to.
https://cointelegraph.com/news/metamask-warns-crypto-users-about-address-poisoning-scam

Cryptocurrency wallet provider MetaMask is warning users of a new scam called 'Address Poisoning' used to trick users into sending funds to a scammer rather than an intended recipient.
When MetaMask users send or receive cryptocurrency, it appears in the wallet transaction list. Clicking the transaction displays more details, including the token, the amount sent or received, and a short form of the third party's address.

Source : https://www.bleepingcomputer.com/news/security/metamask-warns-of-new-address-poisoning-cryptocurrency-scam/

[nakamura12]

You don't have to move it in other board as Beginners & Help is fine. I don't know if what you shared is true or not but if you ask me then it is a good find and you even share it here in this forum. Base on the image you provided, I think it happen to yourself right and it's on mobile devices. If I am wrong then what device did you use when you noticed this hack or did you find it somewhere else and share it here. Many people including myself doesn't want to download anything like PDF (whitepaper, Guide and more) from a casino especially from a new one.

[BIT-BENDER]

Thanks OP for this I have been getting unending messages just like this practically everyday. I thought it was from maybe a service or something but I never took it any where serious at all and did not even see it as a possible threat.

I have developed a natural knack not to get too eager to open any content that is not verifiable, from someone I don’t know. This knack has saved me from this threat right now.

[ScamViruS]

I am not from Nigeria but this warning is definitely helpful. Because now hackers are using this technique in certain countries, maybe in the future hackers will use this technique in other countries as well. In fact, now you have to be careful before opening any message from a stranger, because a little carelessness can lead to big losses. Thanks OP for bringing up this hacker trap trick here.

[suzanne5223]

Despite how harmless this hacker strategy I still believe it is something every cryptocurrency shouldn't have to be a victim of since we both know mobile phones are always vulnerable to attack especially when downloading something from unknown or untrusted source.

Android? Depends on the version and if there are no custom things installed from the carrier itself but usually blocking unknown numbers from the call settings option> block numbers > block unknown numbers slider > will block messages too, at least on my phone. If that doesn't work you can install Truecaller!

This is a nice idea. For people who don't have Truecaller due to privacy and other reason to block unknown user messages. Go to your SMS box> Option > Spam & blocked > Option > Blocked numbers > Block unknown/hidden numbers.

[Ndabagi01]

This information is extremely useful, as one can easily download a PDF sent to his phone to check even if he does not know who sent it, simply out of curiosity to see what it contains. Small pieces of advice like this can help people protect their accounts. If it had been sent to me, I would have downloaded it without hesitation, but this news has helped me understand that it could be hackers attempting to invade one's privacy. The best method is to remove your assets from your phone's wallet apps.

[boyptc]

I used to receive unknown, spam and random emails that contains .pdf files but I delete the emails and ignore them. If someone who's too curious in knowing all of them, you can read the message and you'll understand and definitely get to have the idea that it's a clear scam or attempt to hack.

I don't know if there's an attached malware with such pdf files but I don't want to go deeper with that and it's better to just don't open unsolicited email or links.

[DaNNy001]

Well noted OP thanks for the heads up, although i have come across so many people in my neighborhood that have been bitterly complaining on how there account have hacked and their money stolen. I myself have personal given some lessons to some persons in my area on what to do and what not to do when dealing with  random text or calls from unknown numbers. Just recently, i had to help convinced my friend on not actually sending money to a potential scammer promising him alot and a job offer but first he had to pay for reservations on spot in the company.  It took me some time to finally convinced him. They many scammers and hackers out there so we should all be careful

[lovesmayfamilis]

Apart from the fact that the PDF file itself has a bad reputation, I don't understand how to send it to your phone. I literally broke my head trying to add some files to my phone in the SMS messages section. You can add a link to a file easily, but I couldn't add the file itself. Does Android allow sending files via SMS? There is also a blacklist for blocking unknown numbers; isn't this in Android? In any case, to avoid the temptation to open the file, remove the program from your phone that allows you to open PDF files.

But if you are constantly receiving such messages by email, maybe change your email?

[Outhue]

Apart from the fact that the PDF file itself has a bad reputation, I don't understand how to send it to your phone. I literally broke my head trying to add some files to my phone in the SMS messages section. You can add a link to a file easily, but I couldn't add the file itself. Does Android allow sending files via SMS? There is also a blacklist for blocking unknown numbers; isn't this in Android? In any case, to avoid the temptation to open the file, remove the program from your phone that allows you to open PDF files.

But if you are constantly receiving such messages by email, maybe change your email?

I don't know the type of android phone you have but yes android phones allow sending files through messages ( MMS aka MultiMedia Messaging Service )  , if it's not working on your phone you might want to adjust some settings under messages.

[Cantsay]

[~snipped~]
I don't know the type of android phone you have but yes android phones allow sending files through messages ( MMS aka MultiMedia Messaging Service )  , if it's not working on your phone you might want to adjust some settings under messages.

I guess it's not only her phone. Although mine allows me to send some Media file like video, music, picture but there's no option to send PDF. And I have tried to temper with my settings and it's still not working. Since I'm unable to send PDF file through SMS will I be able to receive them? I'm just asking so as to know if I should be concerned with this update or not.

[rat03gopoh]

I have deleted this shit over 20 times already but the sender keeps sending it back, if you know how I can block the sender ( hidden number ) please do share. God bless

All types of android (afaik) have built-in message filters in their settings. But I don't really think it can completely prevent that if hackers use online SMS services.

Did they really succeed in breaching all these protection measures using the pdf file?

As long as it contains a link, it is very possible to insert something malicious that isn't realized especially mobile devices that are known to have operational limitations such as previewing links. I've seen a tutor somewhere that you can find out someone's location accurately just by sending someone a photo. Hackers might be able to do something crazier, maybe some kind of confirmation router with just a link. idk

[Taskford]

The problem there is he download a file without knowing the content. And this is really a big problem to those people who's innocent about such doing so hope this serves as a lesson for people to be more cautious on links they are seeing and never click anything online specially downloading any files which is unfamiliar to us since this is how hacking or any related incident starts.

[stompix]

Apart from the fact that the PDF file itself has a bad reputation, I don't understand how to send it to your phone. I literally broke my head trying to add some files to my phone in the SMS messages section. You can add a link to a file easily, but I couldn't add the file itself. Does Android allow sending files via SMS?

Probably you're using a custom app for your messages, either from the manufacturer or the carrier, and the file menu is probably hidden somewhere. This is how it looks on my work phone with both the normal sms options and the Samsung one side by side:

I guess it's not only her phone. Although mine allows me to send some Media file like video, music, picture but there's no option to send PDF.

Don't you have send file option? That's what I used to select a pdf file.

Anyhow, it doesn't really matter on the subject as these spammers are not using their phones to manually send those links but automated services.

[lovesmayfamilis]

[~snipped~]
I don't know the type of android phone you have but yes android phones allow sending files through messages ( MMS aka MultiMedia Messaging Service )  , if it's not working on your phone you might want to adjust some settings under messages.

I guess it's not only her phone. Although mine allows me to send some Media file like video, music, picture but there's no option to send PDF. And I have tried to temper with my settings and it's still not working. Since I'm unable to send PDF file through SMS will I be able to receive them? I'm just asking so as to know if I should be concerned with this update or not.

Yes, I meant SMS and sending a PDF file. But I understand that MMS can do this, but it will also be a little problematic with PDF files. To do this, as described, it is necessary to rename this file to an extension for photos or drawings.
And you are right that scammers probably do not use their phones to send such files, but use mass mailing services with fake or purchased phone numbers.
I was interested in the fact that someone could send an SMS with files, as I also receive a lot of spam and advertisements with links, but fortunately, I did not have to receive direct file sends.
Thanks, OP, for letting know about this scam.

https://tech25s.com/how-to-send-a-pdf-file-in-a-text-message-a-few-methods/