Etherscan Phishing Ads Aim to Drain Wallets

Phishing scam advertisements have surfaced on the Ethereum blockchain explorer Etherscan, targeting unsuspecting users with wallet-draining tactics. The malicious ads also appear on Google, Bing, and other popular websites, highlighting the inadequacy of ad scrutiny measures on these platforms. The Angel Drainer phishing organization is suspected to be responsible, with a history of draining millions of dollars in crypto assets.

Phishing Ads Target Unsuspecting Etherscan Users, Potentially Draining Wallets

Introduction:

Etherscan, a prominent Ethereum blockchain explorer, has fallen victim to a phishing scam campaign, with malicious advertisements targeting unsuspecting users and potentially draining their cryptocurrency wallets.

Details of the Phishing Campaign:

Multiple reports have emerged of phishing advertisements appearing on Etherscan. These ads lure users to fraudulent websites and trick them into connecting their cryptocurrency wallets, granting the scammers access to their funds.

Scope and Distribution:

The phishing campaign extends beyond Etherscan, with similar ads also appearing on other popular websites and search engines, including Google, Bing, DuckDuckGo, and Twitter (formerly X). The anti-scam platform Scam Sniffer has attributed this wider distribution to insufficient ad scrutiny by these platforms.

Possible Culprit: Angel Drainer

Angel Drainer, a nefarious phishing organization, is suspected to be behind the scam. They have previously been linked to several high-profile wallet draining incidents, including the theft of over $403,000 in February.

Modus Operandi of Angel Drainer:

Angel Drainer uses a malicious Safe (formerly Gnosis Safe) vault contract to phish users. They exploit the perception of safety associated with Safe to trick victims into connecting their wallets, enabling the scammers to drain their funds without authorization.

Past Exploits by Angel Drainer:

In December, Angel Drainer stole over $484,000 from Web3 apps by exploiting a compromised Ledger employee's account. They inserted malicious code into the GitHub repository of Ledger Connect, infecting apps that upgraded to the affected version.

Another Notorious Scam Group: Inferno Drainer

Inferno Drainer, another notorious scam group, recently announced its closure after draining over $80 million. They operated a wallet-draining software, taking a 20% cut of stolen funds.

Implications for Users:

The Etherscan phishing campaign highlights the importance of vigilance when interacting with online platforms. Users should avoid clicking on suspicious links or connecting their wallets to unfamiliar websites, especially if prompted through advertisements.

Steps to Protect Yourself:

• Exercise caution when clicking on links or advertisements.
• Verify the authenticity of websites before connecting your wallet.
• Use reputable and secure wallets.
• Enable two-factor authentication for added protection.
• Regularly update software and security measures.

Conclusion:

Phishing scams continue to pose a significant threat to cryptocurrency users. The Etherscan phishing campaign serves as a reminder to remain vigilant and to adopt proactive security measures to safeguard your digital assets.