Based

2024

Monero

Million

On May 3, a recent phishing attack targeting a major whale in the cryptocurrency space raised concerns. The attack resulted in the theft of 1155 wrapped bitcoins (WBTC), valued at approximately $70 Million. 
Web3 Anti-Scam platform, Scam Sniffer, has identified the attack, as the attacker utilized addresses with matching beginning and end digits to deceive the victim. While this phishing method is not new, the scale of the losses incurred in this event has created warning alarms all across the crypto community, spreading shockwaves among the users. 
<center>
 <blockquote class="twitter-tweet">
 <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"><img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f494.png" alt="💔" class="wp-smiley" style="height: 1em; max-height: 1em;"> 2 hours ago, another victim lost $68 million by copying the wrong address from a contaminated transfer history. <a href="https://t.co/DepNCnyXhM">pic.twitter.com/DepNCnyXhM</a>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1786374327740543464?ref_src=twsrc%5Etfw">May 3, 2024</a>
 </blockquote> 
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</center> 
<h2 class="wp-block-heading" id="strong-how-did-the-phishing-attack-unfold-and-execute-strong">How Did The Phishing Attack Unfold And Execute?</h2> 
The phishing attack unfolded as follows:&nbsp; 
* The hacker was using batch programs deployed in a distributed manner. 
* Thus, it generated a large number of phishing addresses.&nbsp; 
* They identified a target with an intended transfer address matching the first 4 and last 6 digits of the victim’s address through monitoring on-chain user activities. 
* Once the user initiated a transfer, the hacker swiftly followed up with a transaction from the phishing address, appearing in the user’s transaction history, ultimately leading to the transfer of 1155 WBTC to the phishing addresses. 
Then, an analysis conducted using the on-chain tracking tool MistTrack revealed that the hacker exchanged the stolen WBTC for 22955 ETH and transferred them to the following ten addresses: 
<div class="wp-block-image"> 
 <figure class="aligncenter size-large">
 <img loading="lazy" decoding="async" width="1024" height="390" src="https://www.thecoinrepublic.com/wp-content/uploads/2024/05/image-151-1024x390.png" alt="WBTC" class="wp-image-205439" srcset="https://www.thecoinrepublic.com/wp-content/uploads/2024/05/image-151-1024x390.png 1024w, https://www.thecoinrepublic.com/wp-content/uploads/2024/05/image-151-300x114.png 300w, https://www.thecoinrepublic.com/wp-content/uploads/2024/05/image-151-768x292.png 768w, https://www.thecoinrepublic.com/wp-content/uploads/2024/05/image-151-750x285.png 750w, https://www.thecoinrepublic.com/wp-content/uploads/2024/05/image-151.png 1080w" sizes="(max-width: 1024px) 100vw, 1024px">
 </figure>
</div> 
Source: Slowmist.com 
The hacker then began moving the ETH from these addresses on May 7, employing a pattern of fund transfers involving leaving no more than 100 ETH in each address before distributing the remaining funds evenly and transferring them to the next layer of addresses. 
The extended investigation into the <a href="https://www.thecoinrepublic.com/2022/07/29/celsius-suffers-data-breach-creates-window-for-escalating-phishing-risks/" target="_blank" rel="noreferrer noopener">phishing incident</a> led to the discovery of the hacker’s fee address, which initiated over 20,000 small transactions that distributed small amounts of ETH to various addresses for phishing purposes.&nbsp; 
This widespread net approach suggests the involvement of multiple victims. Through extensive scanning, other phishing related incidents were identified, indicating a pattern of operation by the same hacker address. 
<h3 class="wp-block-heading" id="strong-other-phishing-incidents-were-this-hacker-was-involved-strong">Other Phishing Incidents Were This Hacker Was Involved</h3> 
The hacker has a history of illegal gains, which reveals a laundering pattern involving the conversion of ETH into Monero or transfer across chains to platforms like Tron and suspected over-the-counter (OTC) addresses. This suggests the possibility of employing similar methods to move funds obtained from the WBTC phishing incident. 
Based on threat intelligence networks, several IPs suspected to be used by the hacker were identified and originated from mobile stations, with the use of VPNs not being ruled out.&nbsp; 
Despite stealing 1155 WBTC, the hacker continues to engage in criminal activities, deactivating current addresses and transferring funds to new phishing addresses. 
<h3 class="wp-block-heading" id="strong-how-to-defend-phishing-attacks-strong">How To Defend Phishing Attacks?</h3> 
To defend against phishing attacks, users are advised to utilize whitelisting mechanisms. It will enable small transaction filtering in wallets, carefully verify addresses before confirming transactions, and conduct test transactions with small amounts. These proactive measures can help mitigate the risk of falling victim to phishing attacks and safeguard users’ assets in the crypto space. 
In conclusion, the phishing attack resulted in the loss of WBTC, worth $70 Million. It underscores the importance of vigilance and proactive security measures in the cryptocurrency space. 
By understanding the methods that hackers utilize and implementing preventive strategies, users can better protect themselves against such malicious activities, ensuring the safety of their digital assets.

Unfolding Hacking Of WBTC Worth $70 Million Involving A Whale

Table of Contents

Thecoinrepublic.com

Other articles published on May 13, 2024

Crypto Wallet Integrates Pay-Per-Use Access to Premium AIs

Cryptocurrency: Fuel for Global Business Growth

Trump Pledges Major Tax Reductions

CARV and Google Cloud Share Insights On Advancing Data Democracy in Gaming and AI (13 May)

Degen Chain Faces Unexpected Operational Outage

Crypto Asset Investment Products See New Inflows

Join our free newsletter for daily crypto updates!