Home Breaking News Scammers use Google Ads to siphon off hundreds of thousands of dollars...

Scammers use Google Ads to siphon off hundreds of thousands of dollars from fake crypto wallets

The crypto world is full of dangers, with scammers lying in wait for newbies and novices. A recent report from security outfit Check Point Research highlights a potent form of attack: using Google Ads to direct users to fake crypto wallets. In its report, CPR said it has seen roughly half a million dollars siphoned off through these methods in just the last few days.

The crypto world is full of dangers, with scammers lying in wait for newbies and novices. A recent report from security outfit Check Point Research highlights a potent form of attack: using Google Ads to direct users to fake crypto wallets. In its report, CPR said it has seen roughly half a million dollars siphoned off through these methods in just the last few days.

Here’s how the scam works. Attacker buys Google Ads in response to searches for popular crypto wallets (that’s the software used to store cryptocurrency, NFTs, and the like). CPR says it’s noticed scams targeting Phantom and MetaMask wallets, which are the most popular wallets for the Solana and Ethereum ecosystems.

When an unsuspecting user Googles “phantom,” the Google Ad result (which appears above actual search results) directs them to a phishing website that looks like the real thing. Then, one of two things happens: either the user enters their credentials which the attacker keeps. Or, much weirder, if they try to create a new wallet they’re told to use a recovery password which actually logs them into a wallet controlled by the attacker, not their own. “This means if they transfer any funds, the attacker will get that immediately,” says CPR.

As with phishing scams more generally, the attackers rely on making their fake log-in pages look as much as possible like the real thing. CPR notes that they’ve seen attackers use fake URLs to trick users, directing them to phanton.app or phantonn.app, for example, instead of the correct phantom.app. The group has also seen similar phishing scams used to direct users to fake cryptocurrency exchanges, including PancakeSwap and UniSwap.

CPR’s researchers say they started noticing these scams after seeing crypto users complain about their losses on Reddit and other forums. They estimate that “at least half a million dollars” have been stolen over the past few days.

I believe we’re at the advent of a new cybercrime trend, where scammers will use Google Search as a primary attack vector to reach crypto wallets, instead of traditionally phishing through email,” said CPR’s Oded Vanunu in a press statement. “The phishing websites where victims were directed to reflected meticulous copying and imitation of wallet brand messaging. And what’s most alarming is that multiple scammer groups are bidding for keywords on Google Ads, which is likely a signal of the success of these new phishing campaigns that are geared to heist crypto wallets.”

The group offers a few words of wisdom for users hoping to avoid these pitfalls, including never clicking on Google Ads results but instead looking at search results, and always checking the URL of the site you’re visiting.

CDA Newshttps://cdanewsonline.com
BEST SELLING BLOG THEME OF ALL TIMES. Follow us for more breaking news . Share,, like and Comment on our contents

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Most Popular

CDA News updates you need to know Friday morning

Good morning dear esteemed readers! Here is today’s summary from Nigerian Newspapers: 1. President Bola Tinubu has appointed Mr. Tanimu Yakubu as the new Director-General...

Osinachi Siblings – Ishionwu Sings Praises of Ikwuano Mayor: ‘Your dedication truly commendable’

Joyful celebrations have broken out in Amaoba Ime - Oboro, Ikwuano LGA of Abia State as three children abducted over a month ago...

Supreme Court reserves judgement on FG’s suit against 36 govs

The Supreme Court has reserved its judgment on the suit the Federal Government filed to secure full autonomy for the 774 local governments, LGs,...

CDA News updates you need to know Thursday morning

Good morning dear esteemed readers! Here is today’s summary from Nigerian Newspapers: 1. The Nigeria Labour Congress (NLC) has said that organized labor did not...

Recent Comments