Deceptive Tactics Used to Target Crypto Users

Kaspersky, a leading cybersecurity firm, reveals that this scheme is deceptively crafted.

Kaspersky, a renowned cybersecurity firm, has shed light on a crafty scam that swindlers are employing to steal cryptocurrency, specifically USDT (Tether) and TRX (TRON).

Kaspersky, a renowned cybersecurity firm, has shed light on a crafty scam that swindlers are employing to steal cryptocurrency, specifically USDT (Tether) and TRX (TRON).

The Essence of the Scam

The scam unfolds with messages that appear to be from a friend or relative, already familiar with cryptocurrency. These messages typically include a recovery phrase, further enhancing the sense of authenticity. The messages advise the recipient to use the phrase to recover their wallet, which usually contains a small amount of TRX and a larger sum of USDT.

To create the impression of needing a minimal TRX balance for the USDT transfer, the scammers usually leave a small amount of TRX in the wallet and a larger amount of USDT. This detail is crucial for the scam to work since, in order to transfer USDT, a small TRX balance is required on the same wallet.

To create the impression of needing a minimal TRX balance for the USDT transfer, the scammers usually leave a small amount of TRX in the wallet and a larger amount of USDT. This detail is crucial for the scam to work since, in order to transfer USDT, a small TRX balance is required on the same wallet.

After the victim is convinced to send the TRX to the scammer's multi-signature wallet, which is usually secured by a 2-of-3 multi-signature system, the scammer quickly moves the TRX to another wallet under their sole control.

After the victim is convinced to send the TRX to the scammer's multi-signature wallet, which is usually secured by a 2-of-3 multi-signature system, the scammer quickly moves the TRX to another wallet under their sole control.

The multi-signature wallet is a common technology used in cryptocurrency to provide an extra layer of security. In a 2-of-3 multi-signature setup, two out of three parties need to approve a transaction for it to be executed. For instance, a cryptocurrency exchange might use a 2-of-3 multi-signature system with two internal members and one external service provider to process user withdrawals. Both exchange members would need to agree to withdraw funds to the user's wallet, or one exchange member and the external service provider would need to agree.

In this case, the scammer would create a multi-signature wallet with another person or service (e.g., a service that provides multi-signature as part of its service offering) to collect the TRX. The scammer would also notify the victim that they are transferring the USDT to the victim's wallet. However, since the scammer is one of the two required parties to approve transactions from the multi-signature wallet, they would quickly move the TRX to another wallet under their sole control after receiving it.

This scam is likely to target less experienced crypto users who might not be fully aware of cryptocurrency operations and security best practices. While experienced users are less likely to fall for this scam, it's still possible, especially if they are not paying close attention to the details of the transaction.

To protect against this scam, Kaspersky offers several crucial recommendations:

As Kaspersky's researchers note, this scam tactic exploits the trust of individuals and ensnares careless users. In the cryptocurrency realm, vigilance is essential as alluring promises of quick profits can lead to significant losses. Always remember, easy gains often come with hidden dangers.