DeFi

when

A fake video conferencing software is reportedly being used to perform address-poisoning attacks to steal crypto assets from community members.&nbsp;
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/e7f606cd-e2f0-4a66-9e26-9635e51214ce.jpg" alt="Beware fake conferencing software targeting crypto assets, warns SlowMist founder" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/evilcos/status/1816387825920864516" target="_blank" rel="noopener nofollow">Cos</a>
 </figcaption>
</figure>
SlowMist founder Yu Xian shared a report from a community member and urged the community to be vigilant and not use unfamiliar software for video conferencing. According to Xian, fake software is being used to attempt to steal people’s digital assets. 
<h2 data-ct-non-breakable="true" id="x-user-shares-encounter-with-job-hunting-scam">X user shares encounter with job hunting scam</h2>
An X user with the account name maxlin.eth <a href="https://x.com/0xMaxLin/status/1816378086793044259" target="_blank" rel="noopener nofollow">reported</a> encountering a job-hunting scam. According to the community member, a scammer pretending to be from the human resources department of infrastructure development firm xLabs approached them using Telegram. 
The scammer claimed to have seen the community member’s Web3 career and pretended to offer a marketing specialist role. According to the crypto user, xLabs’ reputation made the community member believe the attempt may have been legitimate. 
The scammer avoided common tactics like directly sending a link to malicious software. Instead, the malicious actors used Zoom to conduct a fake job interview with a different person, making the community member believe the job offer was genuine. 
After chatting for nearly half an hour about xLabs’ vision and products, lowering the guard of their potential victim, one of the scammers asked the user to switch to a different meeting software because the person who approached via Telegram could not join using Zoom. 
Related: <a href="https://cointelegraph.com/news/defi-domain-hacks-crypto-execs-advise-caution">Crypto execs on DeFi domain hacks: Don’t interact with crypto for now</a>
The user was asked to download a meeting software called Meetly, and when the user clicked on the link, they saw a seemingly very real conference screen but did not hear any sound. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/736115b2-fa1a-4439-93ed-0a1c5e9658ea.jpg" alt="Beware fake conferencing software targeting crypto assets, warns SlowMist founder" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/0xMaxLin/status/1816378246436643078" target="_blank" rel="noopener nofollow">Maxlin</a>
 </figcaption>
</figure>
Because of the errors, the scammers asked the user to download the software into their computer. However, after installing the application, it kept freezing and would not work. The scammers ended the session as the application had already been downloaded. 
After conducting research, the user discovered that the link shared by the scammers is widely reported online as a fraudulent website. Additionally, after reviewing the official website and LinkedIn profiles of xLabs, the user found no employees with the names of those who had approached them about the offer. 
In addition, the company did not have an opening for a marketing specialist position, which was offered in the scammers’ meeting. 
After finding more information, the crypto user transferred all their assets into different wallets and was able to prevent potential theft. 
<h2 data-ct-non-breakable="true" id="monoswap-hackers-deployed-similar-strategies">MonoSwap hackers deployed similar strategies</h2>
Hackers deployed a similar strategy during the breach of the decentralized exchange (DEX) and staking platform MonoSwap. On July 23, one of the platform’s developers <a href="https://cointelegraph.com/news/breaking-monoswap-hacked-warning-issued-stay-away">installed a malicious application</a> and was lured into a call by scammers posing as venture capitalists.
On the call, the scammers installed malicious software into the developer’s computer, which had access to the DEX’s wallets and contracts. This enabled the hackers to withdraw staked liquidity from the exchange. 
Magazine: <a href="https://cointelegraph.com/magazine/north-korean-hackers-private-keys-flash-loan-attacks/">Lazarus Group’s favorite exploit revealed — Crypto hacks analysis</a>

Beware fake conferencing software targeting crypto assets, warns SlowMist founder

Table of Contents

Cointelegraph

Other articles published on Jul 26, 2024

Six Ticks Develops Revolutionary Distributed Feeless Blockchain Solution

Coinbase Demands SEC Release Gary Gensler’s Private Emails in New Court Motion

DOGS Listing: Notcoin Predicts It will be in August

Bitcoin Deposits To Binance Spike: Selling Not Over Yet?

Why Did Bitcoin Soar Today? Analysis Company Comments: “The Rally Provided Major Relief”

Upcoming Token Unlocks: A Closer Look at W, OP, SUI, and More

Join our free newsletter for daily crypto updates!