Understanding and Combating Ice Phishing Threats

Ice Phishing is a growing threat with 42 domains detected, 8 of which are currently active. The top TLDs are .com and .app, with arin as a leading registrar.

Ice Phishing attacks often involve the use of malicious smart contracts that exploit users by redirecting transactions to the attacker's wallet. Attackers employ social engineering techniques to lure victims into signing transactions that they believe are legitimate. These transactions often use clever code obfuscation to hide the true nature of the transaction. Attackers also leverage compromised infrastructure, such as DNS servers or hosting services like those registered through arin or Vercel Inc., to create convincing phishing environments. By mimicking legitimate services, these attacks bypass traditional security checks, making detection challenging.

Real Cases

Since Mar 2024 23 dominios con VT ≥ 5