Scammers create Blockworks clone site to drain crypto wallets

nestorsauer8 28. October 2023 0

Phishing scammers have cloned the web sites of crypto media outlet Blockworks and Ethereum blockchain scanner Etherscan to trick unsuspecting readers into connecting their wallets to a crypto drainer.

A faux Blockworks site displayed a faux “BREAKING” information report of a supposed multimillion-dollar “approvals exploit” on the decentralized exchange Uniswap and inspired customers to go to a faux Etherscan web site to rescind approvals.

The faux Uniswap information article was posted on Reddit throughout a number of standard crypto-related subreddits by seemingly compromised Reddit accounts.

The faux Blockworks web site (left) exhibits a faux breaking information story of a Uniswap exploit in contrast to the respectable web site (proper).

The faux Etherscan web site, which shows a purported token and sensible contract approval checker, as an alternative contains a wallet drainer.

Blockchain safety agency Beosin reviewed the drainer’s sensible contract and informed Cointelegraph the attacker hopes to drain wallets with a minimum of 0.1 Ether (ETH), value $180. However, the drainer is incorrectly arrange, as “there is no phishing transaction prompted after a wallet is connected.”

The phishing web site (left) in contrast to the respectable Etherscan web site (proper).

Related: 85% of crypto rug pulls in Q3 didn’t report audits: Hacken

An age verify of the domains exhibits the faux Etherscan site, approvalscan.io, was registered on Oct. 25, and the faux Blockworks site, blockworks.media, was registered a day later.

In an Oct. 25 X (Twitter) publish, Web3 anti-scam platform Scam Sniffer confirmed that scammers had deployed a pockets drainer on a web site cloning the crypto information outlet Decrypt.

Scam Sniffer informed Cointelegraph that the faked Blockworks and Decrypt websites are, nonetheless, run by completely different scammers.

Magazine: Ethereum restaking — Blockchain innovation or dangerous house of cards?

Update (Oct. 27, 1:30 am UTC): This article has been up to date with additional info and feedback from Beosin and Scam Sniffer.