Kaspersky Lab Uncovers Electrum-XMR Scam

On July 30, 2024, a new report from the Kaspersky laboratory revealed a new fraudulent scheme targeting unsuspecting cryptocurrency users. Fraudsters are adept at simulating data leaks of others’ cryptocurrencies to deceive individuals seeking easy profits.

The scheme commences with mass messages distributed via Telegram, containing a link to the crypto-story “Second Echelon,” which conceals a second link leading to a website hosting a list of files.

Among the files are cryptocurrency details, chat phrases, and screenshots of successful transactions, tricking victims into believing in a genuine information leak.

The actual cryptocurrency details are genuine, allowing verification of transaction history. Although the wallet funds are frozen and inaccessible, this aspect lowers suspicions of fraud and fosters the illusion of a legitimate data breach, enticing individuals to exploit the leak for personal gain.

After two months of building interest and enticing quick wealth seekers, the Telegram channel creators shared a new chat screenshot displaying a significant sum of Monero tokens. Observant users noted a CID-Phrase for accessing a wallet containing at least 6,000 Monero tokens (approximately a million dollars).

Some users attempted to access the wallet using the found CID-Phrase through Electrum, encountering issues as the wallet does not support Monero. In their pursuit, they stumbled upon a fake Electrum-XMR wallet site planted by hackers.

While this attack primarily targets those seeking to steal funds, it may impact a broader audience. It is crucial to exercise caution and assess cryptocurrency-related proposals critically.

Recommendations include utilizing reputable cryptocurrency management applications and sites, verifying the sources of downloaded files, recognizing online deception signs, and deploying antivirus software to thwart phishing and malicious programs.

With new cryptocurrency scam schemes emerging regularly, safeguarding data necessitates continuous vigilance. Subscribing to specialized blogs and channels can help stay informed about the latest threats.

/Reports, release notes, official announcements.