Scammers share crypto keys aiming to steal from wannabe thieves: Kaspersky

Scammers are pretending to be naive crypto users who post the seed phrase to a loaded-up wallet online in a scheme that swipes crypto from those trying to raid it.

“Scammers have invented a new trick — they post crypto wallet seed phrases in YouTube comments using newly created accounts,” cybersecurity firm Kaspersky analyst Mikhail Sytnik said in a Dec. 23 blog post.

The researcher found comments in finance-related videos from users asking how to transfer Tether USDT $0.9986 from a crypto wallet to another wallet, which shared a seed phrase.

The wallet seen by Sytnik contained around $8,000 in USDT on the Tron network as bait. A thief wanting to move the USDT would first need to send a small amount of the blockchain’s native token, TRON TRX $0.2526 , to the bait wallet to pay for network fees.

When the would-be thief transfers TRX to the bait wallet for the fees, that TRX is immediately sent to a different wallet controlled by the scammers, as the bait wallet has been set up as a multisignature wallet requiring multiple approvals for outgoing transactions.

“To authorize outgoing transactions in such wallets, approval from two or more people is required,” Sytnik explained. “So transferring USDT to a personal wallet won’t work — even after paying the ‘commission.’”

“In this scenario, the scammers are something like digital Robin Hoods, as the scheme primarily targets other crooked individuals.”

List of transactions detailing the scammer’s earnings. Source: Kaspersky

The researcher advised people never to try to access other people’s crypto wallets, even if given the seed phrase, and to be wary of online strangers’ claims about cryptocurrency.

Scammers looking to scam other scammers is nothing new in crypto.

In July, Kaspersky revealed a more sophisticated scam targeting greedy individuals that involved baiting them on Telegram with links that led to legitimate crypto exchanges and traps disguised as exposed files that could be exploited.

This longer con was aimed at installing malware to potentially steal much more data and assets from the victim’s computer.

Share: Cryptos feed

Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers.