{"id":582256,"date":"2023-05-15T14:20:49","date_gmt":"2023-05-15T13:20:49","guid":{"rendered":"https:\/\/en.ethereumworldnews.com\/?p=582256"},"modified":"2023-05-15T14:20:58","modified_gmt":"2023-05-15T13:20:58","slug":"hitbtc-phishing-site-in-15-million-crypto","status":"publish","type":"post","link":"https:\/\/en.ethereumworldnews.com\/hitbtc-phishing-site-in-15-million-crypto\/","title":{"rendered":"Fake HitBTC Phishing Site Raked In $15 Million In Crypto"},"content":{"rendered":"\n<p>Summary: <\/p>\n\n\n\n<ul><li>This phishing scammer has stolen funds in Bitcoin, Ether, Shib, and USDST since at least June last year.<\/li><li>SlowMist analysis of on-chain data shows that at least $15 million in cryptocurrencies has been drained from HitBTC users.<\/li><li>The scammer mirrors webpages of decentralized apps and web3 tools like HitBTC, Coinone, and LedgerX before draining connected wallets of their value.<\/li><\/ul>\n\n\n\n<p>A crypto phishing scammer has <a href=\"https:\/\/twitter.com\/MistTrack_io\/status\/1658050314774384642?s=20\" target=\"_blank\" data-type=\"URL\" data-id=\"https:\/\/twitter.com\/MistTrack_io\/status\/1658050314774384642?s=20\" rel=\"noreferrer noopener nofollow\">stolen<\/a> over $15 million from victims&#8217; wallets by mirroring UI built by crypto exchanges like HitBTC and digital asset service providers, per crypto tracking and compliance company SlowMist.<\/p>\n\n\n\n<p>The scammer operates four wallets that have been identified so far. SlowMist also estimates that the phishing scammer has used these wallets since around June last year, stealing users&#8217; funds in Bitcoin (BTC), Ether (ETH), Shina Inu (SHIB), and stablecoin USDT. <\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">\ud83d\udea8MistTrack Scam Alert\ud83d\udea8<br><br>Fake site: hitbt2c[.]lol<br>Real site: hitbtc[.]com by <a href=\"https:\/\/twitter.com\/hitbtc?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">@hitbtc<\/a><br><br>This scammer has stolen more than $15 million, including <a href=\"https:\/\/twitter.com\/search?q=%24BTC&amp;src=ctag&amp;ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">$BTC<\/a>, <a href=\"https:\/\/twitter.com\/search?q=%24USDT&amp;src=ctag&amp;ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">$USDT<\/a>, <a href=\"https:\/\/twitter.com\/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">$ETH<\/a> and other currencies. <a href=\"https:\/\/t.co\/i032uASW7y\" rel=\"nofollow\">pic.twitter.com\/i032uASW7y<\/a><\/p>&mdash; MistTrack\ud83d\udd75\ufe0f (@MistTrack_io) <a href=\"https:\/\/twitter.com\/MistTrack_io\/status\/1658050314774384642?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">May 15, 2023<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<h2>Phishing Technique Clones HitBTC Exchange<\/h2>\n\n\n\n<p>The phishing process clones a decentralized app&#8217;s user interface &#8211; HitBTC in this case &#8211; and lures victims into connecting their wallets by clicking &#8220;Approve&#8221;. Approving here gives the phishing contract &#8220;unlimited authorization for your <a href=\"https:\/\/twitter.com\/search?q=%24USDT&amp;src=cashtag_click\" rel=\"nofollow noopener\">$USDT<\/a>&#8220;. <\/p>\n\n\n\n<p>Next, victims are directed to deposit assets like they would on an actual exchange. The crypto phishing scammer designed their cloned platform to only support deposits via the Bitcoin, Ethereum, and Tron networks. <\/p>\n\n\n\n<p>Finally, the victim confirms the transaction thinking they&#8217;re trading on HitBTC&#8217;s actual platform. In the background, the phishers drain users&#8217; wallets of their ETH and other crypto balances. This phisher&#8217;s scamming portfolio features several fake websites as well. <\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">In addition, it has many similar phishing sites, which seems to be a big <a href=\"https:\/\/twitter.com\/hashtag\/ShaZhuPan?src=hash&amp;ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">#ShaZhuPan<\/a>. <a href=\"https:\/\/t.co\/fuHfzkC6tz\" rel=\"nofollow\">pic.twitter.com\/fuHfzkC6tz<\/a><\/p>&mdash; MistTrack\ud83d\udd75\ufe0f (@MistTrack_io) <a href=\"https:\/\/twitter.com\/MistTrack_io\/status\/1658054616989470720?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">May 15, 2023<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<h2>Millions Lost To Crypto Phishers<\/h2>\n\n\n\n<p>Phishers have raided unsuspecting victims since the internet evolved into a mainstream network used by millions. These illicit actors also target crypto users thanks to the liquidity coursing through decentralized finance and blockchain ecosystems.<\/p>\n\n\n\n<p>The intersection between web2 marketing tools and web3 platforms also creates an opportunity for phishers to attack crypto users. Google ads were used to steal over $4 million from thousands of users. The data <a href=\"https:\/\/en.ethereumworldnews.com\/crypto-phishers-millions-users-google\/\" target=\"_blank\" data-type=\"URL\" data-id=\"https:\/\/en.ethereumworldnews.com\/crypto-phishers-millions-users-google\/\" rel=\"noreferrer noopener\">showed<\/a> a surge in shady Google ads promoting fake websites. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Unsuspecting HitBTC users have lost $15 million in BTC, ETH and other cryptos to a phishing scammers since June last year. <\/p>\n","protected":false},"author":55,"featured_media":580185,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[1233,108912,1322,108038,1811],"_links":{"self":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/582256"}],"collection":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/comments?post=582256"}],"version-history":[{"count":2,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/582256\/revisions"}],"predecessor-version":[{"id":582260,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/582256\/revisions\/582260"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media\/580185"}],"wp:attachment":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media?parent=582256"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/categories?post=582256"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/tags?post=582256"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}