Crypto attack is growing rampant day by day

[Tamaperdana]

Snip

Yes, basically, we just have to be more careful nowadays, because currently there are many things offered in this virtual world, and everything looks very good because it is probably based on AI. But that is where we have to be careful, because currently fraud or theft can be easily done with existing technological advances. So yes, currently we really have to be able to filter all information well before we swallow it raw.

So don't be easily tempted by the convenience offered, because there may be many who disguise themselves as thieves behind it. So the point is, we can't be careless now, because we certainly don't want anything to happen to our valuable assets, because basically we collected them with great difficulty. The point is, your topic is very good, it really reminds us all that we have to be more careful now. Because basically, we will be easier to anticipate it if we know from the start.

[drangos]

But I'm not too happy about how it's presented to the user. Is it an AI trading tool or what? A recent study by HP reveals that such fake AI trading bots can substitute legitimate wallet extensions with malicious ones, and steal the credentials that are entered into the wallet. This gives the attack its extra sinister nature. As the interface can be indistinguishable from normal to the victim. In my experience, the better practice is to download the wallet software from the official website. And not from any random sponsored site or free trading software. And to also keep large amounts in a wallet that isn't the browser wallet that is used to browse the web.

[X-ray]

I always knew that extension wallet are never safe, a malware could replace the extension or inject it with malicious .dll library and the encrypted wallet data can be harvested for harvest now decrypt later attack.

Always feeling uneasy using metamask because it's just strange, went from hardware wallet to a wallet that is attached to a browser simply feels like a security lackluster.

If you had used hardware wallet, some of these malware crypto attack might not even affect you at all because your seed phrase, private key, and wallet data is stored in a safe place inside a high security device.

You'll get isolated keys and immunity to malware to certain extent by simply shelling out 59 USD.

[jcojci]

The first thing is verify and not just follow other suggestions. That is a must to avoid the same case happens to you. We don't know how secure the apps if we don't verify and research for more. Because of a simple action could make us in trouble so be careful if you want to install an app. If you want to trade from your phone, you should download the app from the official but make sure if that is secure. If you found that the trading platform doesn't have the app, the warning sign must comes to you and avoid it immediately.

[slaman29]

You sure tho OP? I remember in 2021 people were giving all kinds of stats for autism and linking it to vaccination. Forgetting all about the most common reason for more finding out of anything which really is just better reporting and increased tracking.

I believe the same is happening with hacking and crypto attacks.

Was talking about this recently, AI is increasing the frequency and range, so it feels like its growing rampant. Its just becoming more efficient.

Besdies, somebody using crypto shouldn't be downloading trading bots

I always knew that extension wallet are never safe, <>

I do use MM but yeah, I never ever keep anything on it. Asking for trouble.

[5W-KILO]

I could see this is actually a type of Trojan attack. AI ​​isn't doing anything extraordinary here.
These hacker really know how to fish, lol. They are straight up baiting user with promise of some shiny AI trading tool.

So perpetrators are human but their tool is merely being marketed as AI.

It's not really the AI trading bot that is doing the attack, but the malware that gets installed, called Needle Stealer. It scans the computer, especially wallet extensions like MetaMask, Coinbase Wallet, Phantom and others.

So I think the point here is that we should not be afraid of AI tools in general, but we should be very careful with AI tools that we find through ads or random websites because some of them can actually be malware. For me the risk is too high, especially if that computer is also being used to access crypto wallets. Better not to install random trading tools unless you are sure where they came from.

A Trojan can be named AI trading tool, same as malware, and for someone who is looking for a free AI trading tool they will click download and install then viola, it doesn't have to be an AI but what the malware name is.

Just like the information that the OP said, people who likes using search engine to find free softwares are likely going to get caught in this trap, what you typed and search is how your result will look like.

You sure tho OP? I remember in 2021 people were giving all kinds of stats for autism and linking it to vaccination. Forgetting all about the

Besdies, somebody using crypto shouldn't be downloading trading bots

I always knew that extension wallet are never safe, <>

I do use MM but yeah, I never ever keep anything on it. Asking for trouble.

Someone using crypto should or would definitely download trading bots, why though? Holders want to grow their bags too and accurate trading bots helps alot here, that's if you use the right bots that can place orders and takes profits, it makes things easier.

What's left?  That someone who is holding coins should be trading then? That's impossible I believe, it's not all crypto holders that want to just hold and do nothing else.

[pawanjain]

This is something new to me. How are they gaining access to our device at first place ?
It's not the first time hackers have been able to send phishing links to victims but replacing the wallets and stealing the funds is next level.
Seems like we need to be aware of what all links we click on the internet, turn off auto downloads and manually verify everything we download from the internet before using it.

[bitLeap]

I could see this is actually a type of Trojan attack. AI ​​isn't doing anything extraordinary here.
These hacker really know how to fish, lol. They are straight up baiting user with promise of some shiny AI trading tool.

So perpetrators are human but their tool is merely being marketed as AI.

I think that the more widespread AI technology becomes, the easier it is to access more massive hacks. Today there is a lot of AI being used to exploit crypto wallets, this is a strong warning that we must really be able to separate it from online access. Some time ago I saw the founders of Chatgpt, Anthropic and even Elonmusk as the owner of Grok agree temporarily to stop the development of AI, my suspicion is that this has to do with giving access to increasingly uncontrolled criminal acts.

[RockBell]

The first thing is verify and not just follow other suggestions. That is a must to avoid the same case happens to you. We don't know how secure the apps if we don't verify and research for more. Because of a simple action could make us in trouble so be careful if you want to install an app. If you want to trade from your phone, you should download the app from the official but make sure if that is secure. If you found that the trading platform doesn't have the app, the warning sign must comes to you and avoid it immediately.

 A lot of people don't do verification when it comes to certain apps, and sometimes reviews also help, but how many people actually love to do reviews and their apps that you can easily trade on? Sometimes you will even see some fake adverts on social media about trades, and that is one of the reasons why we need to be careful about what we are going to do. It would have been better to do your research after doing your validation, then you will be able to do things easily.

Social media is one of the instruments that scammers constantly use, so you shouldn't believe everything you see there. For this reason, before downloading any program, we must be certain that we can perform the verification. The moment you sense a scam, as you said is better to avoid it.

[yhiaali3]

I think you are referring to the malware known as "Needle Stealer" which was detected by the HP Wolf Security team.

This software replaces files of browser extensions (such as Metamask, Phantom, or Coinbase wallets) with a "fake and modified" version  and once the password or "seed phrase" is entered it is sent directly to the hackers' server so they can withdraw your money whenever they want.

Simply Do not download any suspicious files from the internet and do not save your assets on a device connected to the internet and you will be safe.

[KiaKia]

There is another attack targeting iPhone users, I think believe that this year will leave a mark, probably break the record of the year, the attacks of this year alone is way bigger than what has happened in the past.

Every news online is now about hackers, scams and vulnerability in crypto projects,  platforms and crypto wallets, this is getting crazier by the day, I literally got tired of reading through coinbreau and coin telegraph, it's that ugly.

[Hamza2424]

We should not use free trading tools at all, we should not download anything at all which is not audited by any developer that is trusted by the majority. Or at least run the code in AI to ask if there is anything wrong with it.

But still, if you want to install the trading bot, don't install it on your main computer, use a spare device, or run a VM, but bro, a VM can also be compromised if proper settings were not followed, which can be found on Google.

[Royal Cap]

We all should know that nothing is free in this world. Whatever is free, of course you are the product of that free thing. We can see the same thing here too. Those who were attacked here had installed the free thing on their computers and from that, the extension malware spread. For this, I prefer to have a separate device for the crypto wallet and another device for daily use. And we should not install any third party apps on the device where we use the crypto wallet. So maybe this way we can stay safe to some extent. Because the way is growing, it is becoming very difficult for us to stay safe in this situation.

[Nothingtodo]

As technology is updated, the types of scams have learned to update. Especially now, fraudsters follow all such methods in such a way that users have no way of understanding when they will become a victim of hacking.
If someone uses a bot for some reason and acts according to the instructions given by that bot, then his wallet will definitely be drained and his wallet will fall into the hands of hackers. That is, as the day is updated, Bitcoin is becoming a cause for concern for investors.

[osasshem]

This is another form of attackers creating a new form of attacks with the advancement of AI to improve their methods while using free trading tools as it's bait on those who prefer using free softwares. Staying updated with softwares we use and making use of the official software will help prevent us from these form of attacks. As crypto users, we are the bigger target of these attackers, therefore to avoid them is simply to maintain the standard of safety.

[Lida93]

This is something new to me. How are they gaining access to our device at first place ?
It's not the first time hackers have been able to send phishing links to victims but replacing the wallets and stealing the funds is next level.
Seems like we need to be aware of what all links we click on the internet, turn off auto downloads and manually verify everything we download from the internet before using it.

As bitcoin major on its development and value continues to increase becoming the new digital gold, it would remain a target for hackers and scammers who will continue to device new ways to steal bitcoins from it real owners. Staying updated and ensuring to make any download of a software from it official website should be the right security practice to imbibe rather than trusting some third party source links and extensions. Also, as regularly spoken as the idea about separately having our wallets that holds large bitcoins off online yet some persons still treat this as a no big deal.

[Smartvirus]

Once you installed it the script will invisibly replace every wallets you have in your browsers like Metamask for example with a fake Metamask version and the crazy part is you can still use it like the original, move out funds and all that.

Did I get this correctly because, I think that can’t actually happen. Why?

You can’t send or transfer what was never there in the first place. Replacing your wallet with some fakes doesn’t mean the content of the wallet is carried along too.
The malware only gets to replace your wallet with one that can be used to mirror your activities on that device and through that, your password and seed phrases can be accessed.
With these details, importing your wallet comes with no stress and that’s how you lose your hodlings.

You actually did misunderstand the part of that talked about having funds transferred.

And yeah, warnings are allowed when you’ve got facts to back them, moderator don’t act without cause.

[GiftedMAN]

The price is rising and the market is growing in size and number of adopters, so obviously and statistically speaking attacks and other types of crimes should increase as well as everything else. But the way you are saying makes it look like there is an unexpected rise in crimes which doesn't seem right.

Right from time the attacks has been coming on crypto investors but the recent attacks is looking like something that is being planned since the recent rising of the market no doubt about this but come to think of it don't you think there is a sudden rise in the attacks cause the news is becoming too much especially this year and a lot of hacks has happened. I'm wondering if what is happening now is caused by adopters becoming too losed or let's say scammers are trying different new tricks to see if they will perfect all they have been learning.

[bhadz]

This is another form of attackers creating a new form of attacks with the advancement of AI to improve their methods while using free trading tools as it's bait on those who prefer using free softwares. Staying updated with softwares we use and making use of the official software will help prevent us from these form of attacks. As crypto users, we are the bigger target of these attackers, therefore to avoid them is simply to maintain the standard of safety.

Some of these softwares can be false positives to the anti virus that we have, and the best way to avoid still is by being informed and keep our browsing safe. And some of these can't be detected by our system even if we're updated. That's how good these hackers do and so, don't download unnecessary tools and remember that if we use something for free, we are their product and much worse is we are their targets and victims.

[LogitechMouse]

---
Remain Vigilant and maybe move your coins to a cold storage rather, and don't leave big amount on crypto wallets that functions in a add-ons style.

Scammers are evolving
Technology is upgrading
While we investors? We remain stagnant and we don't even know which are scams and which are not.

I'm not saying all, but we can't deny the fact that there are always victims of these scammers because they're lacking of information towards how to secure their assets. Being vigilant isn't enough anymore. We need to be knowledgeable as well on how these scammers are operating so that we would know what are the things that we should avoid. There's always 2 words that are being associated with how these scammers operate. DOWNLOADING AND INSTALLING, and we should always double or triple check on where we are downloading things.

TBH right now, I don't know which storages are safe and which are not anymore. Even the hardware wallet that we are saying as the "safest" wallet aren't prone to hacks at all.