According to PANews, cybersecurity firm Scam Sniffer warned that malware attacks targeting Telegram crypto communities have surged by 2,000% recently. Scammers use fake verification bots to trick users into running scripts, leading to multiple users’ private keys being exposed and their wallets drained. Web3 phishing losses across the network reached $9.38 million in November, with more than 9,200 victims.
These tactics combine community-based luring with Trojan injection. Scammers first impersonate analysts or project teams in communities to lure people into groups. Once inside, fake bots demand verification within a countdown, creating a sense of urgency. The page then deliberately displays a failure message, prompting users to “fix it manually” while secretly writing malicious PowerShell code to the clipboard. Once users paste and run it in the terminal, the Trojan quietly harvests browser history and wallet private keys in the background.
To guard against fake verification Trojans, keep these three points in mind:
1. Never paste commands into the terminal: legitimate verification only requires clicking within the software; you should never need to open a command line and paste code.
2. Keep social and financial environments separate: use different devices for community chats and large wallets, and never store private keys unprotected on a computer you use regularly.
3. Verify the source of official communities: before joining a group, check the project’s official website, and don’t click unfamiliar links in comment sections.
Any verification that asks you to open a terminal and paste code is 100% a Trojan targeting your private keys.
This is not investment advice. Please assess the risks for yourself.
$BTC $ETH
These tactics combine community-based luring with Trojan injection. Scammers first impersonate analysts or project teams in communities to lure people into groups. Once inside, fake bots demand verification within a countdown, creating a sense of urgency. The page then deliberately displays a failure message, prompting users to “fix it manually” while secretly writing malicious PowerShell code to the clipboard. Once users paste and run it in the terminal, the Trojan quietly harvests browser history and wallet private keys in the background.
To guard against fake verification Trojans, keep these three points in mind:
1. Never paste commands into the terminal: legitimate verification only requires clicking within the software; you should never need to open a command line and paste code.
2. Keep social and financial environments separate: use different devices for community chats and large wallets, and never store private keys unprotected on a computer you use regularly.
3. Verify the source of official communities: before joining a group, check the project’s official website, and don’t click unfamiliar links in comment sections.
Any verification that asks you to open a terminal and paste code is 100% a Trojan targeting your private keys.
This is not investment advice. Please assess the risks for yourself.
$BTC $ETH
