These attackers are using accounts that closely resemble the official profiles of the cryptocurrency projects, aiming to deceive users into clicking on phishing links.
According to SlowMist, the attackers obtain X accounts with older registration dates and varying numbers of followers to confuse victims. They then transform these purchased profiles into fraudulent representations of official accounts. When a legitimate project publishes a tweet, a bot posing as that project leaves a comment that includes a phishing link.
Unsuspecting victims assume that the comment was written by the project’s author, and when they click on the link, they are redirected to third-party websites that contain phishing software. This allows the criminals to steal the victims’ assets.
To combat this threat, SlowMist experts recommend using plugins that can identify fake addresses, employing security modules, and thoroughly checking the accounts that leave links before clicking on them.
Earlier, the US Commodity Futures Trading Commission (CFTC) also raised concerns about the increase in fraudulent projects in the financial market that claim to be neural networks using artificial intelligence.