[Warning]: Impersonation and spoofing of crypto related companies on Twitter

[Dave1]

There were reports of another scam attack thru impersonation, but this time it's different, they uses blockchain analytics or crypto fraud investigation firms and researchers, like CertiK, ZachXBT, and Scam Sniffer to fabricate that there was such breaches on Uniswap and OpenSea.

So to impersonate, this cyber criminals a Twitter name that resembles the legit ones. For example,

ZachXBT has the account @zachxbt, while the criminals created and tweeted from @zacheryxbt.



And after you click, you will be redirected to two websites:

Code:

http://revoketokens.io/

Code:

http://revokea.sh/

Good that this website has been taken down and offline, but the criminals was able to run off initially with $50,000. And I felt sorry for those victims. So in any case that this kind of attacks resurfaces again, just be cautious though and check everything first before you go and click any link.

https://www.bleepingcomputer.com/news/security/fraudsters-make-50-000-a-day-by-spoofing-crypto-researchers/

[1714604883]

1714604883

[1714604883]

1714604883

[Yamane_Keto]

I did not imagine that Twitter links could convince people to click on them, especially after the possibility of purchasing verification, which in my opinion would make all accounts suspicious.
How did scammers steal money? Did they link the wallet or did they ask users to enter the seeds because simply clicking on a phishing link is not enough to steal your money?

[Lida93]

Good that this website has been taken down and offline, but the criminals was able to run off initially with $50,000. And I felt sorry for those victims. So in any case that this kind of attacks resurfaces again, just be cautious though and check everything first before you go and click any link.

https://www.bleepingcomputer.com/news/security/fraudsters-make-50-000-a-day-by-spoofing-crypto-researchers/

This is a simple example of "don't be in a hurry when surfing the internet", Many times people fall into this impersonated sites similarity scam is mainly when they are in a hurry, not frugally paying attention to what they are clicking. They just assume since the site  has the letters they are familiar with so therefore it should be exact site they are clicking.

It's a pity a woofing $50k was lost by individuals to this scam before it was discovered , however, better late than never. For sure this action will continually surface which is why the caveat should be on us that targeted users be cautious, attentive, never get tired/bored of cross checking a site eaxh time you are to use/click on it if it's the actual site you intend to use.

Don't let laziness cause you your fortune.

[Amphenomenon]

$50,000 wow but it's dissappointing how we humans will just put high hopes on someone and never ever try to consider anything they say again if it's false, like if these individuals are gods themselves or being cautious of impersonation online on those they follow. It's dissappointing but this will continue but if anyone in this Forum falls victim then they should really be ashamed because one thing I have learnt from this forum is that the Internet is not always a safe place.

[Taskford]

Good that this website has been taken down and offline, but the criminals was able to run off initially with $50,000. And I felt sorry for those victims. So in any case that this kind of attacks resurfaces again, just be cautious though and check everything first before you go and click any link.

https://www.bleepingcomputer.com/news/security/fraudsters-make-50-000-a-day-by-spoofing-crypto-researchers/

This is a simple example of "don't be in a hurry when surfing the internet", Many times people fall into this impersonated sites similarity scam is mainly when they are in a hurry, not frugally paying attention to what they are clicking. They just assume since the site  has the letters they are familiar with so therefore it should be exact site they are clicking.

It's a pity a woofing $50k was lost by individuals to this scam before it was discovered , however, better late than never. For sure this action will continually surface which is why the caveat should be on us that targeted users be cautious, attentive, never get tired/bored of cross checking a site eaxh time you are to use/click on it if it's the actual site you intend to use.

Don't let laziness cause you your fortune.

People need to consider that this impersonation exist and they need to do extra effort to make their self safe by researching the real companies or person that they want to deal so that they would not be scammed by those people who use this technique to scam people. Researching will not cost a lot of time so much better for newbies to exert some little efforts to locate those legit and directly send a message to them. They also need to remember that a legit corporation will not pm them first but rather you will be the one who would approach them. Since if someone will send you a private message then tag it as scam and avoid so that we will not fall on their scams.

Being lazy will give us a huge benefit but rather it will just give us a headache and financial loss that's why to avoid it better if we could just do a research on everything we do since its important if we know how this people work so that we are away for any type of scamming.

[tech30338]

There were reports of another scam attack thru impersonation, but this time it's different, they uses blockchain analytics or crypto fraud investigation firms and researchers, like CertiK, ZachXBT, and Scam Sniffer to fabricate that there was such breaches on Uniswap and OpenSea.

So to impersonate, this cyber criminals a Twitter name that resembles the legit ones. For example,

ZachXBT has the account @zachxbt, while the criminals created and tweeted from @zacheryxbt.



And after you click, you will be redirected to two websites:

Code:

http://revoketokens.io/

Code:

http://revokea.sh/

Good that this website has been taken down and offline, but the criminals was able to run off initially with $50,000. And I felt sorry for those victims. So in any case that this kind of attacks resurfaces again, just be cautious though and check everything first before you go and click any link.

https://www.bleepingcomputer.com/news/security/fraudsters-make-50-000-a-day-by-spoofing-crypto-researchers/

why do we still fall for these kinds of schemes, this thing has happened before and is not new in the internet space, before email spoofing where they send a message saying they have to pay a certain SI or sales invoice, and since the email name looks legit they process the transaction, without looking at the email header
See the example:

The green and the red should be the same if they are not the same you should not process anything or don't even click a link
so we are better aware of this, clearly, they have evolved how they are going to trick people, so we better also evolve for our protection by being vigilant and careful, double check everything or checking it multiple times like how we transfer funds, before processing or clicking something to avoid this kind of thing from happening.

[348Judah]

There were reports of another scam attack thru impersonation, but this time it's different, they uses blockchain analytics or crypto fraud investigation firms and researchers, like CertiK, ZachXBT, and Scam Sniffer to fabricate that there was such breaches on Uniswap and OpenSea.

So to impersonate, this cyber criminals a Twitter name that resembles the legit ones. For example,

ZachXBT has the account @zachxbt, while the criminals created and tweeted from @zacheryxbt.



And after you click, you will be redirected to two websites:

Code:

http://revoketokens.io/

Code:

http://revokea.sh/

Good that this website has been taken down and offline, but the criminals was able to run off initially with $50,000. And I felt sorry for those victims. So in any case that this kind of attacks resurfaces again, just be cautious though and check everything first before you go and click any link.

https://www.bleepingcomputer.com/news/security/fraudsters-make-50-000-a-day-by-spoofing-crypto-researchers/

The moment we begin with the realization of the needs to always make satisfactory research and verification on anything we see online, that same time will be how we will be one more step faraway from being attacked.

Impersonation is a common means of attacking people and is one of the old times means they use to scam newbiew and those that don't pay attention to details by checking everything they see online before accepting their authenticity, they try to act in place of the intended organization in other to deceive being the official sites, agents or representative thereby sending unsolicited physhing links with the aim to attack through a malicious means.

[OcTradism]

Rather than revoke smart contract approval and access to their wallets, they will lose tokens to those phishing sites.

There are three solid websites to revoke smart contract approval
https://app.unrekt.net/
https://revoke.cash/
https://etherscan.io/tokenapprovalchecker

The fake accounts on X (Twitter) can be easily detected with audit score for followers.
https://www.twitteraudit.com/
https://www.followeraudit.com/

I am really sure those fake accounts will have account creation date not too old and followers are mostly fake.

[Churchillvv]

Empathetically I feel the pain of those scammed I mean I can't blame any victim for this scams because I have seen clone sites look almost exactly the same the difference can be very slight e.g Jumia.com a shopping site in Nigeria and this false Jumie.com. difference of a&e very small to notice.
And I have seen some site clone directly like have a site inside another site. most time it's only developers that can understand the error.
This scams occur regularly so it is a good idea to share with us to create awareness. in part of impersonation its a reoccurring event even on social media I see comedians being impersonated and the fake account even tend to be more real than the original, have more followers than that of the original comedian etc. We should just be more careful to find the original sites and accounts we are dealing with period.

[Nwada001]

This scammer really doesn't know when to stop, and even with the awareness created about this form of scam to educate people on how to detect and avoid falling victim, they still come back with different methods, and most people really find it difficult to understand or notice a fake when they see one.
 
Impersonation is no longer a new form of scam on social media and the internet at large. That's why we highly advise people not to always use Google search engines or social media search bots to search for an account or website that they are looking for, because they might not be able to differentiate the clone from the real and at the same time might fall victim to a phishing site by just making the mistake of clicking on the wrong link.
 
It's always advisable for one to follow and bookmark the website and account they want to get legit information from; that's pages that they are sure are legit and that's gotten from the right source. It's always good to save and bookmark, as it reduces the chance of one getting scammed as a result of searching for a user account.

[ImThour]

This clearly shows that the scammers are always one step ahead. They impersonated someone whom everyone in Crypto trusts, so when he says to do something, they do.
Sad for those who lost nearly $50,000. Kudos to the scammer for being so innovative, creating an account with a similar name, and still not being flagged by Zachxbt himself.
The domain sounds original to be very honest like that's what it's meant to do.

[Porfirii]

This clearly shows that the scammers are always one step ahead. They impersonated someone whom everyone in Crypto trusts, so when he says to do something, they do.
Sad for those who lost nearly $50,000. Kudos to the scammer for being so innovative, creating an account with a similar name, and still not being flagged by Zachxbt himself.
The domain sounds original to be very honest like that's what it's meant to do.

The scammer could better use his/her creative skills in something more productive (not only for him I mean, because the loot was large...). I hope that those who were scammed could afford to lose that money. I wonder if the social media platform itself can be made responsible of the loss for not establishing more strict security measures.

[DYING_S0UL]

This clearly shows that the scammers are always one step ahead. They impersonated someone whom everyone in Crypto trusts, so when he says to do something, they do.
Sad for those who lost nearly $50,000. Kudos to the scammer for being so innovative, creating an account with a similar name, and still not being flagged by Zachxbt himself.
The domain sounds original to be very honest like that's what it's meant to do.

Scammers are also adapting to new ways to scam innocent people. In order to protect our assets, we should never believe the first moment anyone says anything if finance is involved. If the other person is in a hurry, then something is actually fishy. Rule of thumb. Not just phishing sites, they are also using spoofed emails. These emails look exactly like the original emails, with a minor difference. And there was no way to identify if it was real or fake the first time. A funny thing happened to me once. I used one of my emails on a crypto related site. Some days later, I got a message from an exchange saying that my account might be compromised and I had to change my credentials, even though I don't have any accounts on that exchange. lol...

[sokani]

Scammers are thinkers, they're always coming up with new ploy to deceive unsuspecting individuals. What a well thought out plan! The scammer disseminated a wrong information from a fake account, instructing users to revoke their wallets from Uniswap by clicking the link. And the victims complied, not knowing that they're actually granting their wallets access to a malicious website.

Lesson learnt: No matter how doxxed a person or an institution is, whenever you receive a message like this, don't be in a rush, always confirm the information before taking any course of action.

[ZAINmalik75]

I did not imagine that Twitter links could convince people to click on them, especially after the possibility of purchasing verification, which in my opinion would make all accounts suspicious.
How did scammers steal money? Did they link the wallet or did they ask users to enter the seeds because simply clicking on a phishing link is not enough to steal your money?

Twitter has been used so many times to scam innocent people. Actually, many newbies are entering the crypto market as they are buying and want to gain profit from the upcoming bull run. To do that, they are trying everything and following everyone so that they can get and know more about any asset or incident.

But what they don't want to do is put in their own manual work; they just want to join communities and follow others and don't want to do their own research. That's why they become a sitting duck for scammers and become victims of these scams.

For example, many people lost funds when they connected their wallets to a website to claim NFTs that were posted on Viatlik's main account after being hacked by the hackers. We all should have one basic rule in our minds: never trust any link coming from Twitter, and to revoke access, we have to connect our wallet, and that's what all victims did because they do have some knowledge to not share seed phrases but don't have enough knowledge to check things out first.

[Faisal2202]

Good that this website has been taken down and offline, but the criminals was able to run off initially with $50,000. And I felt sorry for those victims. So in any case that this kind of attacks resurfaces again, just be cautious though and check everything first before you go and click any link.

That's sad but I wonder sometimes how people fall prey to these scams, overall, hackers and scammers are putting real work like how they managed to arrange a Twitter account and website (which I know is not that hard for scammers) but point is if they are doing real work then we (future victims) should also put some real efforts to get education of all kinds of scams.

Last time there was a application on Microsoft's app store on Windows which causes a loss of huge amount of money, and now this.

We should double check everything before connecting our wallets I have learnt this thing that when you do things fast without confirming, without double checking, you become a victim. Therefore we should verify a news from multiple resources and should join some community where we can discuss on new matters and should remain active. At least this work we can do if we want to avoid such scams.

[Zaguru12]

That's sad but I wonder sometimes how people fall prey to these scams, overall, hackers and scammers are putting real work like how they managed to arrange a Twitter account and website (which I know is not that hard for scammers) but point is if they are doing real work then we (future victims) should also put some real efforts to get education of all kinds of scams.

They use this two things as bait to lure potential victims. First it is easier to get a verified account now on X (formerly Twitter) because of the subscription service that Elon Musk is running now. Before only reputable individuals could get that verified accounts now scammers just buy the blue tick. The second thing is they gather more followers either by growing the account or by purchasing it. Then naive people will look at this number of followers and the blue tick and then start trusting the account. This one of the reason why buying accounts is frowned upon on this forum. We need to educate ourselves and others that large followers or adverts from celebrities shouldn’t be a yard stick to trust any information on social media.

We should double check everything before connecting our wallets I have learnt this thing that when you do things fast without confirming, without double checking, you become a victim. Therefore we should verify a news from multiple resources and should join some community where we can discuss on new matters and should remain active. At least this work we can do if we want to avoid such scams.

What I will say is never connect your wallet to any site, if you intend to connect your wallet make sure it is not a wallet that holds funds, so when it back fire you don’t lose your funds. In fact you shouldn’t have a significant amount of funds on a wallet that is on device that is online.

[Yaunfitda]

Good that this website has been taken down and offline, but the criminals was able to run off initially with $50,000. And I felt sorry for those victims. So in any case that this kind of attacks resurfaces again, just be cautious though and check everything first before you go and click any link.

That's sad but I wonder sometimes how people fall prey to these scams, overall, hackers and scammers are putting real work like how they managed to arrange a Twitter account and website (which I know is not that hard for scammers) but point is if they are doing real work then we (future victims) should also put some real efforts to get education of all kinds of scams.

Yeah, most of the time it's hard to imagine how crypto investors simply believed anything they see on their Twitter, and criminals is known to be good at spoofing everyone, not just like this kind of impersonation. Since the advent of AI, there has also been a lot of impersonation in Youtube resulting in millions lost from this scammers and this is a very dangerous world that we live it.

We should double check everything before connecting our wallets I have learnt this thing that when you do things fast without confirming, without double checking, you become a victim. Therefore we should verify a news from multiple resources and should join some community where we can discuss on new matters and should remain active. At least this work we can do if we want to avoid such scams.

Maybe we can't really reiterate enough that in crypto world, we shouldn't just trust anyone but verify. But I guess this is going to be a expensive lessons for those who fall for this trick and hopefully next time they have learned from it. And for us, just be cautious as well and simply not connect anything without checking the links.

[Husires]

I am really sure those fake accounts will have account creation date not too old and followers are mostly fake.

I have friends who take everything that comes from social media seriously, and they may believe all the links that tell you that you can become rich or that warn you of losing your money, especially if they come from people who seem to understand what they are saying and have many likes and retweets. I see that if the view number when it low and there are a lot of retweets, then something abnormal is definitely happening.

[royalfestus]

Impersonation is becoming increasingly difficult to deal with. They provide everything necessary; similar twitter account, website, telegram handle, even coin with similar features. I would recommend that one not rush into putting funds, but instead take time to research (compare sites and browse online). You can search known websites such as coingecko and coinmarket, and then follow the link from the website.