Crypto attack is growing rampant day by day

[5W-KILO]

I tried warning people on here yesterday about a bot that's capable of swapping every crypto wallets on your PC to a fake one and they will drained your wallet whenever they feel ready but moderator removed it, I still don't get why, is warning like this not suitable in beginners &help section of the forum?

HP security team detected it first, and to be honest I've never heard about anything like it before, the AI bot is spread through search engines and trading tools online, targeting those people who likes free trading tools especially.

Once you installed it the script will invisibly replace every wallets you have in your browsers like Metamask for example with a fake Metamask version and the crazy part is you can still use it like the original, move out funds and all that.



https://x.com/CoinMarketCap/status/2101003617113170148

Remain Vigilant and maybe move your coins to a cold storage rather, and don't leave big amount on crypto wallets that functions in a add-ons style.

[Alvin_talk]

Generally crime/scam activities is growing across many financial institutions, including the banking sector and also crypto. But this shouldn't be treated as another form of FUD for holders. The major thing is to keep yourself up to date with latest scam and information around the financial world, so that you do not become a prey for these petty scammers/hackers.

[eternalgloom]

I could see this is actually a type of Trojan attack. AI ​​isn't doing anything extraordinary here.
These hacker really know how to fish, lol. They are straight up baiting user with promise of some shiny AI trading tool.

So perpetrators are human but their tool is merely being marketed as AI.

[Sanitough]

I could see this is actually a type of Trojan attack. AI ​​isn't doing anything extraordinary here.
These hacker really know how to fish, lol. They are straight up baiting user with promise of some shiny AI trading tool.

So perpetrators are human but their tool is merely being marketed as AI.

It's not really the AI trading bot that is doing the attack, but the malware that gets installed, called Needle Stealer. It scans the computer, especially wallet extensions like MetaMask, Coinbase Wallet, Phantom and others.

So I think the point here is that we should not be afraid of AI tools in general, but we should be very careful with AI tools that we find through ads or random websites because some of them can actually be malware. For me the risk is too high, especially if that computer is also being used to access crypto wallets. Better not to install random trading tools unless you are sure where they came from.

[BALIK]

I could see this is actually a type of Trojan attack. AI ​​isn't doing anything extraordinary here.
These hacker really know how to fish, lol. They are straight up baiting user with promise of some shiny AI trading tool.

So perpetrators are human but their tool is merely being marketed as AI.

As @Sanitough already mentioned, basically a piece of malware known as Needle Stealer is being distributed under guise of fake AI Trading Agent and AI Assistant.

It actually has nothing to do with AI.

Unsuspecting users install it after being attracted by the promise of free AI trading bot.
Once installed malware operates in background and replacing files of legitimate browser extension with fake interface. It replaces the core file of browser extension like MetaMask, Phantom or Coinbase Wallet.
As a result password, seed phrase and granted permission are sent directly to hackers server.

[Charles-Tim]

Thie topic is very similar to this one posted few hours ago: https://bitcointalk.org/index.php?topic=5594550.msg67158396#msg67158396

They are both about scam trading bots which are common means hackers are using to compromise people's devices through malware and other means.

Posts on both threads many likely be similar.

But it is not bad that more people will know about the scam.

[Livingleged]

This is definitely a valid warning that people should seriously take note. especially for beginners who usually like to download free trading tools or wallet related software from an unknown source. Malware that target crypto users always lead to loss of fund just like this case. So being careful enough about what we install is very important.

At the same time technical claims should be backed by original security reports so people can actually understand what malware does and how it spreads. But this main warning is important: avoid unknown software and browsers extensions, use official wallet source and never trust seed phase into software or website. It’s been said in many thread here. I think that’s why mod removed your topic before, it might be sounding like some other topic that have been discussed here.

[free-bit.co.in]

I tried warning people on here yesterday about a bot that's capable of swapping every crypto wallets on your PC to a fake one and they will drained your wallet whenever they feel ready but moderator removed it, I still don't get why, is warning like this not suitable in beginners &help section of the forum?

Dunno, but moderator usually treat random link or alarmist social media clip as spam or fear mongering unless they are backed by official source or proper analytical explanation.

So, if your previous post had mentioned technical detail such as HP Wolf Security or Needle Stealer or DLL side loading then there would have been no reason for it to be removed.

[Zaguru12]

Thie topic is very similar to this one posted few hours ago: https://bitcointalk.org/index.php?topic=5594550.msg67158396#msg67158396

They are both about scam trading bots which are common means hackers are using to compromise people's devices through malware and other means.

Posts on both threads many likely be similar.

But it is not bad that more people will know about the scam.

Both post were posted by OP and I think he thinks they are different scams and that’s why OP might have created different threads.

Both are Bots scams and are similar as such they could actually do well to be in same thread.

Another thread going forward that I will advise the OP to post scams like this is the [General] Crypto scams, attacks and malware thread by Mitchell. The thread is pinned and would actually be easy to see even in later times for newbies to learn from

[YOSHIE]

Remain Vigilant and maybe move your coins to a cold storage rather, and don't leave big amount on crypto wallets that functions in a add-ons style.

Yes, you are right about the information, which I also saw on CoinGecko, where they said they lost more than $3.63 billion due to hacking on global crypto platforms, This clearly proves that every Bitcoin user must be truly vigilant in maintaining the security of their Bitcoin assets. Entering 2026, a surge in cyber attacks has really disturbed Bitcoin exchanges, they are increasingly sophisticated, complex and organized in their tactics.

I see that since Bitcoin exchanges added and the presence of open-source AI, hackers are getting more dangerous, for that reason every Bitcoin user is always wary of Fake Links & Pop-ups that is connected to an exchange or wallet and also avoid airdrop advertisements that are not clear, what else does verification have to be done, there is a big possibility that it is all a trap from hackers and fake verification.

[LFC_Bitcoin]

It’s not just online attacks like phishing or hacking. There’s an increasing number of violent robberies, torturing ($5 wrench type attacks).

Make sure your set up is rock solid and be as discrete as possible. The fewer people who know about your Bitcoin the better.

[Don Pedro Dinero]

It’s not just online attacks like phishing or hacking. There’s an increasing number of violent robberies, torturing ($5 wrench type attacks).

Make sure your set up is rock solid and be as discrete as possible. The fewer people who know about your Bitcoin the better.

It is clear that Bitcoin is a prime target for criminals, which has led to an increase in these attacks. A few decades ago, criminals dreamt of making off with briefcases full of wads of banknotes; nowadays, all they need to do is break into your home and torture you into sending them a fortune with just two clicks. We need to be more careful than ever.

[MusaMohamed]

It’s not just online attacks like phishing or hacking. There’s an increasing number of violent robberies, torturing ($5 wrench type attacks).

Make sure your set up is rock solid and be as discrete as possible. The fewer people who know about your Bitcoin the better.

With the growth of Bitcoin market and cryptocurrency market in general, there are more greedy but bad people who don't want to work but aim at physically attack other people and steal cryptocurrencies.

It's very scary to look at this site and see how many physical attacks happened as well as physical consequences, not only money losses.
https://stats.gart.io/

Live a humble life, maintain privacy and anonymously as most as possible.
[What] The $5 wrench attacks.
[How] to protect your bitcoin from $5 wrench attacks.
Can duress wallets stop Bitcoin attacks?
The Bitcoiner's guide to physical security.

[stompix]

I tried warning people on here yesterday about a bot that's capable of swapping every crypto wallets on your PC to a fake one and they will drained your wallet whenever they feel ready but moderator removed it, I still don't get why, is warning like this not suitable in beginners &help section of the forum?

Maybe because you normally would make topics that are about vulnerabilities and malware more detailed than a ...tweet?
Not that you're known for making garbage topics and dumping them all over the board like your second one about bip110...

So, original link:
https://threatresearch.ext.hp.com/hp-wolf-security-threat-insights-report-september-2026/
https://threatresearch.ext.hp.com/wp-content/uploads/2026/09/HP_Wolf_Security_Threat_Insights_Report_September_2026.pdf

The website tradingclaw[.]pro promotes a cryptocurrency trading bot whose name deliberately echoes a well-known AI assistant, exploiting the trust users already place in it. Visitors are promised a personalized bot that follows a user-defined strategy and trades crypto 24/7 (Figure 1). Attackers drive traffic to the site through search-engine poisoning and paid advertising. Once convinced, the user is offered a ZIP archive posing as a software installer.

Also, the repost mentions 3 more attack vectors and 6 more malware types, but...well, that's for who actually reads it!

[Donneski]

I know that scammers are surely going to find their way into using these AI trading tools as phishing tools to perfect their fraudulent moves so I'm not even surprised one bit.

You see how this malware is being well packaged to make it look legitimate. When someone installs a supposed AI trading assistant and it goes own to silently replace their wallet extension, it'll be very difficult to detect such attack until it's time to move funds.

Sometimes, a wallet security depends on the softwares you install on a particular device not really the wallet it self.

[Z-tight]

It’s not just online attacks like phishing or hacking. There’s an increasing number of violent robberies, torturing ($5 wrench type attacks).

Make sure your set up is rock solid and be as discrete as possible. The fewer people who know about your Bitcoin the better.

Yeah, $5 wrench attacks are increasing in their numbers and what's worse is that you could be as discreet as you can be, and yet your personal data would be leaked and end up in the hands of bad actors because one service or institution didn't do their job well.

Take Ledger for example, or Trezor's logistics partner, ShipMonk, or Revolut, or French tax office, and the list is on and on. Customers of these institutions and many more are exposed to physical attacks, not of their own mistake, and it's so bad.

[Fiatless]

I tried warning people on here yesterday about a bot that's capable of swapping every crypto wallets on your PC to a fake one and they will drained your wallet whenever they feel ready but moderator removed it, I still don't get why, is warning like this not suitable in beginners &help section of the forum?

The moderator of the Beginners and Help section created a special thread for every information that is related to Crypto scams, attacks and malware.

This is the another of (probably) many general threads that will be created in this subsection. A General thread will contain relevant information related to the question/subject of the title thus duplicate threads related to it are not allowed. That means no new topics for scams, attacks, malware, phishing, clipboard hijacking, wrench attacks, and the like in this section. Post it in this thread instead.

HP security team detected it first, and to be honest I've never heard about anything like it before, the AI bot is spread through search engines and trading tools online, targeting those people who likes free trading tools especially.

Once you installed it the script will invisibly replace every wallets you have in your browsers like Metamask for example with a fake Metamask version and the crazy part is you can still use it like the original, move out funds and all that.

Sadly there will be an increase in such AI powered attacks. This is not just happening in the crypto industry but in every sector. AI tools help these scammers to develop tools faster and cheaper. Verifying the source of every app before downloading or using is important.

[pooya87]

The price is rising and the market is growing in size and number of adopters, so obviously and statistically speaking attacks and other types of crimes should increase as well as everything else. But the way you are saying makes it look like there is an unexpected rise in crimes which doesn't seem right.

[DiMarxist]

Every day scammers are on the watch out looking for how they can steal people's crypto currency. So am not particularly surprised about news like this as scammers has taken it to a whole different level. The most important lesson we all should learn from news like this is that we should always be on the watch out when ever we are online.

Been vigilant is key especially when we are online, the types of crypto we download and even the sites that we visit online is very important. The reason is that scammers has started developing fake crypto apps, wallet's and even site's with the sole aim of spreading malware's which will make our crypto security vunorable for hackers to to attact.

[aoluain]

It’s not just online attacks like phishing or hacking. There’s an increasing number of violent robberies, torturing ($5 wrench type attacks).

Make sure your set up is rock solid and be as discrete as possible. The fewer people who know about your Bitcoin the better.

Yeah, $5 wrench attacks are increasing in their numbers and what's worse is that you could be as discreet as you can be, and yet your personal data would be leaked and end up in the hands of bad actors because one service or institution didn't do their job well.

Take Ledger for example, or Trezor's logistics partner, ShipMonk, or Revolut, or French tax office, and the list is on and on. Customers of these institutions and many more are exposed to physical attacks, not of their own mistake, and it's so bad.

Exactly, the scary part is that we have all been submitting our personal data to many sites
and services all over the internet for many years, and I'm talking about before being sensitive
about that was a concern. Now it has become a major concern, enough that I am really
concerned about historically where I have spread my data.

Thankfully though in terms of the OP's topic, I dont do wallets on my PC, computer, phone or
laptop and this is another example why an open source hardware wallet is a way better option,
but its not 100% re. Trezor/ShipMonk!