Crypto attack is growing rampant day by day

[Outhue]

I tried warning people on here yesterday about a bot that's capable of swapping every crypto wallets on your PC to a fake one and they will drained your wallet whenever they feel ready but moderator removed it, I still don't get why, is warning like this not suitable in beginners &help section of the forum?

HP security team detected it first, and to be honest I've never heard about anything like it before, the AI bot is spread through search engines and trading tools online, targeting those people who likes free trading tools especially.

Once you installed it the script will invisibly replace every wallets you have in your browsers like Metamask for example with a fake Metamask version and the crazy part is you can still use it like the original, move out funds and all that.



https://x.com/CoinMarketCap/status/2101003617113170148

Remain Vigilant and maybe move your coins to a cold storage rather, and don't leave big amount on crypto wallets that functions in a add-ons style.

It doesn't ends here, cold storage isn't the end goal to you getting scammed and possible getting jumped on, you aren't talking about keeping your mouth shut while you are holding your cryptocurrencies, crypto especially Bitcoin today is now like a brandnew detected Goldmine, you talk about it people will come asking where the location's at, especially if the country is a developing one where people are so desperate to make their daily breads, not talking about it keeps your safer than many people know..

[OcTradism]

It doesn't ends here, cold storage isn't the end goal to you getting scammed and possible getting jumped on, you aren't talking about keeping your mouth shut while you are holding your cryptocurrencies, crypto especially Bitcoin today is now like a brandnew detected Goldmine, you talk about it people will come asking where the location's at, especially if the country is a developing one where people are so desperate to make their daily breads, not talking about it keeps your safer than many people know..

Security of your bitcoin fund in cold storage and cold wallet is different than privacy and your practice that either puts you at risk under eyes of possible scammers or attackers.

If you are scammed, it's not actually because of your cold storage abused by hackers. Scams can be from your actions with which you send your bitcoin to scammers and lose your bitcoins.

Physical attacks are other risk and people must keep their mouth shut to maintain privacy, and avoid risk of getting physical attacks. If they are too noisy, not humble, they will let many people knowing about their investment in bitcoin, cryptocurrency, and it's nothing good for life security.

People undervalue their privacy until they lost it and more dangerous, lost their funds or lost their lives.
https://stats.gart.io/
Manage your bitcoin like a whale.
Protect your bitcoin from $5 wrench attacks.

[Sandra_hakeem]

You sure tho OP? I remember in 2021 people were giving all kinds of stats for autism and linking it to vaccination. Forgetting all about the

Besdies, somebody using crypto shouldn't be downloading trading bots

I always knew that extension wallet are never safe, <>

I do use MM but yeah, I never ever keep anything on it. Asking for trouble.

Someone using crypto should or would definitely download trading bots, why though? Holders want to grow their bags too and accurate trading bots helps alot here, that's if you use the right bots that can place orders and takes profits, it makes things easier.

Nobody is trying to stop traders from making money all they want and nobody should be distressed on your behalf if you download a needle stealer spyware instead of an AI trading bots. You can't blame anyone for that. Personally, I like to avoid anything that looks too complicated to manage--- there's no distinct way to differentiate what's supposed to be the traditional trading bots from the spyware (I could be wrong), so I'd rather not take the risk.

---
Remain Vigilant and maybe move your coins to a cold storage rather, and don't leave big amount on crypto wallets that functions in a add-ons style.

TBH right now, I don't know which storages are safe and which are not anymore. Even the hardware wallet that we are saying as the "safest" wallet aren't prone to hacks at all.

Nothing is 100% safe and reliable.

[SquirrelJulietGarden]

Nobody is trying to stop traders from making money all they want and nobody should be distressed on your behalf if you download a needle stealer spyware instead of an AI trading bots. You can't blame anyone for that. Personally, I like to avoid anything that looks too complicated to manage--- there's no distinct way to differentiate what's supposed to be the traditional trading bots from the spyware (I could be wrong), so I'd rather not take the risk.

Traders can trade and get profit if they can, the market is big enough for many traders but money flow in this market is actually classic of a zero-sum game. If a trader want to get profit, he will need to beat other traders in the market, and in long term of trading, need to beat the market too.

The fact is quite not comfortable for traders: most traders lose money in the market and they all learned, tried to use many trading tools, but they mostly can not change their trading results.

If a trader won't be an intelligent trader, it's hard to beat the market and other traders in long term.

Intelligent, I would like to say intelligent investors rather than intelligent investors.

Nothing is 100% safe and reliable.

Especially in trading.

If people can not take care of security, they will face with risk of losing money too.

[Orpichukwu]

Generally crime/scam activities is growing across many financial institutions, including the banking sector and also crypto. But this shouldn't be treated as another form of FUD for holders. The major thing is to keep yourself up to date with latest scam and information around the financial world, so that you do not become a prey for these petty scammers/hackers.

Anyone who is involved in crypto has to be very careful with how they download and grant app access to their gadgets. I have always been of the opinion that all these apps, be they AI-built or by some developers who claim to do it for the benefit of others, always have their own hidden agenda. If one must use any of those applications for gaming or AI, it’s better to have your crypto wallet connected to a separate device to be on the safer side.

[MisFoxie]

I could see this is actually a type of Trojan attack. AI ​​isn't doing anything extraordinary here.
These hacker really know how to fish, lol. They are straight up baiting user with promise of some shiny AI trading tool.

So perpetrators are human but their tool is merely being marketed as AI.

..
So I think the point here is that we should not be afraid of AI tools in general, but we should be very careful with AI tools that we find through ads or random websites because some of them can actually be malware. For me the risk is too high, especially if that computer is also being used to access crypto wallets. Better not to install random trading tools unless you are sure where they came from.

AI actually not always bad but that doesn’t mean we should use it in very important places where real money will be involved. No matter how trusted AI is we should never share private things through AI because this data can be hacked. And I am completely against using AI for trading.

Reputable AI company will not do anything againt the law but a third party company that is specialized in AI trading may not follow the law and they may not set limits on AI. If they don’t set those limits and instead put malware into it that can be a big red flag for users. AI should be used where they cannot cause us any harm for us.

[Sandra_hakeem]

Nobody is trying to stop traders from making money all they want and nobody should be distressed on your behalf if you download a needle stealer spyware instead of an AI trading bots. You can't blame anyone for that. Personally, I like to avoid anything that looks too complicated to manage--- there's no distinct way to differentiate what's supposed to be the traditional trading bots from the spyware (I could be wrong), so I'd rather not take the risk.

Traders can trade and get profit if they can, the market is big enough for many traders but money flow in this market is actually classic of a zero-sum game. If a trader want to get profit, he will need to beat other traders in the market, and in long term of trading, need to beat the market too.

The fact is quite not comfortable for traders: most traders lose money in the market and they all learned, tried to use many trading tools, but they mostly can not change their trading results.

If they can't change their trading results with all those assistance, why bother and then put your funds at risk? We're concerned about the security of the funds and not how you get to make your millions. If hackers have decided to launch an attack on crypto and on people's reserve, we better sit up and put some kind of excuses aside for security reasons.

Intelligent, I would like to say intelligent investors rather than intelligent investors.

What do you mean?

If they don’t set those limits and instead put malware into it that can be a big red flag for users.

As much as I'd never want to depend on Ai, it's unlikely that the companies create those malwares.

[Felicity_Tide]

It doesn't ends here, cold storage isn't the end goal to you getting scammed and possible getting jumped on, you aren't talking about keeping your mouth shut while you are holding your cryptocurrencies, crypto especially Bitcoin today is now like a brandnew detected Goldmine, you talk about it people will come asking where the location's at, especially if the country is a developing one where people are so desperate to make their daily breads, not talking about it keeps your safer than many people know..

Avoiding crypto attacks aren't just restricted to digital/online spaces... Physical spaces also possess a certain level of risk/threats that also demands a high level of caution and preventive measures. But digital attacks are unarguably getting more sophisticated by the day. A major area of threat that I think people tend to overlook is when they have their wallets on a device that is always connected to the internet and also used for daily activities. Wallets that contain actual funds shouldn't have a place on such devices.

Some of these softwares can be false positives to the anti virus that we have, and the best way to avoid still is by being informed and keep our browsing safe. And some of these can't be detected by our system even if we're updated.

Choosing a separate device for the storage of main funds would easily prevent anyone from going through the stress of finding an antivirus that probably wouldn't do its job... But again, most users just prefer to take the risk, rather than pay the little cost of preventing possible damage.

[Churchillvv]

I could see this is actually a type of Trojan attack. AI ​​isn't doing anything extraordinary here.
These hacker really know how to fish, lol. They are straight up baiting user with promise of some shiny AI trading tool.

So perpetrators are human but their tool is merely being marketed as AI.

Not to be scared of AI, humans are to be scared of because we actually use things that are meant to help or be of good to carry out the bad intentions.

But however, this might be the core of the whole story to be ware of free AI tools that is meant for good or assistance, I mean it could come with malware’s and clipboard virus or any kind of harm but yet you’re right that it’s the humans behind the tools and not the tools itself.

[Dogedegen]

I tried warning people on here yesterday about a bot that's capable of swapping every crypto wallets on your PC to a fake one and they will drained your wallet whenever they feel ready but moderator removed it, I still don't get why, is warning like this not suitable in beginners &help section of the forum?

HP security team detected it first, and to be honest I've never heard about anything like it before, the AI bot is spread through search engines and trading tools online, targeting those people who likes free trading tools especially.

Once you installed it the script will invisibly replace every wallets you have in your browsers like Metamask for example with a fake Metamask version and the crazy part is you can still use it like the original, move out funds and all that.

It is not really hard to build that now in the age of AI, since the source code of many wallets are open source and the others are popular enough and have repeated patterns of information. The hardest part of this kind of attack is finding a way to infect the user, but many falls for social engineering attacks. Others have vulnerable machines that are not updated and stuff like this. Browser wallets should not be used for anything more than small hot wallets for situations that are appropriate. Maybe the user has some weird bug that makes him unable to connect their hardware wallet to their browser wallet, then it is fine to have a small balance in there. The issue is more about educating the user in knowledge but also ways of thinking correctly about security issues to prevent future attacks that will be different from this one.

[bhadz]

Some of these softwares can be false positives to the anti virus that we have, and the best way to avoid still is by being informed and keep our browsing safe. And some of these can't be detected by our system even if we're updated.

Choosing a separate device for the storage of main funds would easily prevent anyone from going through the stress of finding an antivirus that probably wouldn't do its job... But again, most users just prefer to take the risk, rather than pay the little cost of preventing possible damage.

It's hard to change the mindset of those users who think they are already safe, even though the obviousness of what they do can put themselves into risk. I agree that if someone has the ability to have a separate device for accessing their wallets, where it's mainly used for that, better. But not all have that the capacity to buy their own extra one since their portfolio isn't that much to be worried of. IMO, that's the start of care when we become so curious about security and we does things that's going to increase our safety from these risks.

[slaman29]

<>
I do use MM but yeah, I never ever keep anything on it. Asking for trouble.

Someone using crypto should or would definitely download trading bots, why though? Holders want to grow their bags too and accurate trading bots helps alot here, that's if you use the right bots that can place orders and takes profits, it makes things easier.

Most normal traders, if you're talking about those who actually trade medium or long term don't have many trades. Why need a bot to automate 20/30 trades a month?

All the exchange tools like SL and TP are enough for auto execution. Set your entry and exit, leave the terminal. Done.

You don't need a bot for this!

[ZeroVinsonN]

It’s not just online attacks like phishing or hacking. There’s an increasing number of violent robberies, torturing ($5 wrench type attacks).

Make sure your set up is rock solid and be as discrete as possible. The fewer people who know about your Bitcoin the better.

Anyone trying to lose the assets (and maybe their lives) can go right ahead to make sure the whole world knows they are holding, we are all mostly adults after all. People actually forget that you can hold bitcoin or any other crypto and still be discreet about it.
Sometimes I wonder if they are in a race to see who holds more because as an individual I really don't see why anyone other than yourself should know you are a bitcoin holder.

[Nrcewker]

I could see this is actually a type of Trojan attack. AI ​​isn't doing anything extraordinary here.

I dont think its a Trojan. I think its some sort of malware that we unknowingly install on our PCs. I might be wrong but the attack process seems pretty similar to what mentioned in the OP.

I still remember back in the day when you would download free software from the web and run an .exe file, only to suddenly find your PC infected. At that time clipboard hijackers or clipper malware, were very common. They would simply replace the BTC address you copied and pasted when sending BTC. So, a similar kind of incident could be happening here as well. I would suggest not downloading or running any .exe files on your PC from unknown sources. For trading tools its better to pay a small amount and download them from trusted sources.

[PVequalNRT]

Anyone who is involved in crypto has to be very careful with how they download and grant app access to their gadgets. I have always been of the opinion that all these apps, be they AI-built or by some developers who claim to do it for the benefit of others, always have their own hidden agenda. If one must use any of those applications for gaming or AI, it’s better to have your crypto wallet connected to a separate device to be on the safer side.

If you are going to use your phone for crypto storage, I think it's important that you make sure your wallet where you keep your phone is different from the phones you use for crypto activities. This way, even if you download app that can steal something, they may not be a threat to your crypto. Although, it's important that you practice safe way of avoiding those apps that can steal things from your wallet, some can get other informations about you.

Avoid free things as possible, you can see that people are complaining about their stolen crypto, some of them loss their details during airdrops and giveaways and now they are feeling the consequences of their actions.

[SeriouslyGiveaway]

If you are going to use your phone for crypto storage, I think it's important that you make sure your wallet where you keep your phone is different from the phones you use for crypto activities. This way, even if you download app that can steal something, they may not be a threat to your crypto. Although, it's important that you practice safe way of avoiding those apps that can steal things from your wallet, some can get other informations about you.

You can use that phone for everything but it mainly depends on the wallet you store on that device. If it is a small funded wallet, you can use it as a hot wallet quite comfortably and you can afford to lose the fund quite easily too.

If you can not afford to lose the fund, you will need to take care of the phone more carefully, offline, air gapped and use other phones, other devices for things related to Internet and cryptocurrency activities.

There is no same advice for everyone, depends on practical needs, advice would be very different.

[Ndabagi01]

It is very hard to feel and distinguish some of this bits that’s are capable of draining your wallet. The best thing one should always do is separate the device they have their crypto on from accessing online with them, they should stick to using different devices  to surf the net rather than using the same for all activities.

Scammers are getting smarter everyday and they will always use your vulnerability to attack you and also make you fall for their trick at all time. Crypto attacks will never stop as long as the people are still embracing and using crypto. Newbies without knowledge are more targeted and when a disclaimer like this is posted, it is important that actions are taken immediately on that regard.

[Doll2233]

Security and privacy are the biggest concerns in current times because technology is developing, and things are getting more vulnerable. Everyone needs to do enough to stay safe. Never open your mouth publicly; it's increasing physical crimes. People can do enough to have things that they need, just like this.

Never keep all your data online. Recently enough big attacks and hacks have caused massive losses. Everyone needs to learn enough because now, without knowledge and enough security, keeping things secure is looking not easy. There are many easy ways for people to enter and interfere, which can do enough damage.

Technical knowledge is also important; without it, keeping your coins safe is not easy, as many already mentioned hackers are living one step ahead. Just because of this, doing enough and staying ahead of them is also a need of time.