when

Security

<p>In a recent wave of cryptocurrency theft,<a href="https://www.cryptopolitan.com/scammers-investors-cordinate-phishing-emails/" rel="noopener noreferrer nofollow"> scammers</a> have exploited a vulnerability in ERC-2612 tokens, enabling them to drain victims’ wallets without requiring transaction confirmation. Reports suggest that attackers have successfully executed this scam through a deceptive method on Telegram, leading to significant financial losses for unsuspecting users.</p>
<h2 class="wp-block-heading" id="telegram-phishing-scam-exploits-erc-2612-tokens">Telegram phishing scam exploits ERC-2612 tokens</h2>
<p>The scam targets tokens compliant with the ERC-2612 standard, which facilitates “gas-less” transfers and eliminates users needing to manually approve transactions. Instead, attackers leverage the owner’s signature to drain funds from compromised wallets. Victims are lured into the scam through fraudulent Telegram groups posing as official channels for token developers.</p>
<p>Victims are enticed to connect their wallets to purported verification systems, believing it to be a routine process to prove they are not bots. However, users unwittingly grant access to their wallets by merely connecting their wallets. Despite never authorizing any transactions, victims find their cryptocurrency holdings depleted within minutes of interaction with the fraudulent platform.</p>
<h2 class="wp-block-heading" id="sophisticated-phishing-techniques-unveiled">Sophisticated phishing techniques unveiled</h2>
<p>A closer examination of the scam reveals the intricacy of the phishing techniques. The fraudulent Telegram groups mimic legitimate verification systems, such as Collab. Land, with subtle differentiations that evade detection at first glance. For instance, the fake system sends messages from a nearly identical username, capitalizing on visual similarities to deceive users.</p>
<p>Blockchain data sheds light on the mechanics of the attack, showcasing the exploitation of the ERC-2612 standard’s features. Attackers manipulate functions within token contracts, such as “Permit,” to authorize transfers without requiring traditional approval transactions.&nbsp;</p>
<p>Scammers circumvent security measures by setting themselves as authorized spenders and victims as owners, enabling unauthorized fund transfers.</p>
<h2 class="wp-block-heading" id="security-implications-of-erc-2612-standard">Security implications of ERC-2612 standard</h2>
<p>While the ERC-2612 standard introduces convenience by enabling transactions without holding <a href="https://www.cryptopolitan.com/coinbase-advocates-for-sec-nod-on-eth-etf/" rel="noopener noreferrer nofollow">Ether</a>, it also introduces new avenues for exploitation. Permitting transfers through signed messages rather than approval transactions presents opportunities and risks. While legitimate developers may leverage this feature to enhance user experience, scammers exploit it to defraud unsuspecting users.</p>
<p>As cryptocurrency scams evolve, users must exercise caution to safeguard their digital assets. Vigilance is paramount when engaging with online platforms, particularly on social media channels like Telegram. Verifying the authenticity of communication channels and refraining from sharing sensitive information can mitigate the risk of falling victim to phishing scams.</p>

Scammers drain cryptocurrency wallets through Telegram phishing scam

Table of Contents

Cryptopolitan_News

Other articles published on Feb 23, 2024

Kelexo takes on Manta Network and Jupiter hegemony

Report: Weighing AI Pros and Cons in Healthcare

Algotech taking the presale by storm – Polkadot and Polygon Investors Look to Move in

Gauntlet ends Aave partnership over DAO governance disputes

Startale snags additional seed funding from Samsung and UOB

Turns Out Bitcoin ETFs Matter!

Join our free newsletter for daily crypto updates!