區塊鏈分析公司 Bitrace 警告說，掃描錯誤的二維碼可能會耗盡你的錢包

Bitrace 警告稱，存在一種新型加密貨幣詐騙，“通過支付二維碼轉賬測試進行盜竊，本質上是欺騙用戶授權錢包。”

A new crypto scam is targeting users with a payment QR code transfer test, deceiving them into authorizing their wallets and draining their funds, blockchain analysis firm Bitrace has warned.

區塊鏈分析公司 Bitrace 警告稱，一種新的加密貨幣騙局正在透過支付二維碼轉帳測試來針對用戶，欺騙他們授權錢包並耗盡他們的資金。

The scam unfolds in a specific sequence, according to Bitrace. The scammer initiates the interaction by proposing to swap tokens over-the-counter — via a wallet-to-wallet transfer instead of an exchange — offering an exchange rate that beats the market.

據 Bitrace 稱，該騙局按照特定的順序展開。詐騙者透過提議在場外交易代幣（透過錢包到錢包的轉帳而不是交易所）來發起互動，並提供優於市場的匯率。

They also propose a fee for the transaction, denominated in Tron’s TRX token, in exchange for long-term cooperation. To gain the user’s trust, they even make a small payment of Tether (USDT).

他們還提出以 Tron 的 TRX 代幣計價的交易費用，以換取長期合作。為了獲得用戶的信任，他們甚至支付了少量的 Tether（USDT）。

After the initial interaction, the scammer asks the user to participate in a “small repayment test,” which involves returning the USDT by scanning a QR code. However, the QR code leads to a third-party website that prompts the user to confirm the “test” transaction, and clicking “confirm” steals the user’s wallet authorization, according to Bitrace.

初次互動後，騙子會要求用戶參與“小額還款測試”，即透過掃描二維碼返還 USDT。然而，據 Bitrace 稱，二維碼會指向第三方網站，提示用戶確認「測試」交易，點擊「確認」會竊取用戶的錢包授權。

At least 27 wallet holders appear to have fallen victim to the scam, collectively losing around $120,000 in USDT, according to Bitrace. The attacks occurred between July 11 and July 17, and the scammer used the same wallet in each instance.

據 Bitrace 稱，至少 27 名錢包持有者似乎成為了該騙局的受害者，總共損失了約 12 萬美元的 USDT。這些攻擊發生在 7 月 11 日至 7 月 17 日期間，詐騙者每次都會使用同一個錢包。

The funds were then moved through five intermediary addresses and into three accounts with Cambodian crypto exchange Huione for laundering, according to Bittrace.

據 Bittrace 稱，這些資金隨後透過五個中間地址轉移到柬埔寨加密貨幣交易所 Huione 的三個帳戶中進行洗錢。

Cyberattacks have been on the rise in 2024. According to cybersecurity firm Cyvers, the total volume of stolen crypto funds this year is approaching $1.4 billion.

2024 年網路攻擊呈上升趨勢。

Access control breaches — often phishing attacks — accounted for the vast majority of stolen funds, with around $490 million pilfered in the second quarter alone.

存取控制違規（通常是網路釣魚攻擊）佔被盜資金的絕大多數，光是第二季就有約 4.9 億美元被盜。

“A risk check on the counterparty’s address before the transaction is crucial,” Bitrace said, adding that the company is developing a “one-click risk check tool to help users identify potential risks associated with target addresses.”

Bitrace 表示：「交易前對交易對手地址進行風險檢查至關重要。」並補充說，該公司正在開發「一鍵式風險檢查工具，幫助用戶識別與目標地址相關的潛在風險」。