Search our database of flagged domains. Check if a website is a scam, phishing, or legitimate.

Всего отслеженных

ВЫСОКИЙ THREAT

Understanding and Combating Фишинг с использованием льда Threats

Фишинг с использованием льда is a growing threat with 42 domains detected, 8 of which are currently active. The top TLDs are .com and .app, with arin as a leading registrar.

Домены Detected

ВЫСОКИЙ

Threat Level

How This Attack Works

Фишинг с использованием льда is a sophisticated technique that targets users by manipulating blockchain transactions. Here's how it typically unfolds.

STEP 1

Target Identification

Attackers identify potential victims, often targeting users with significant cryptocurrency holdings.

STEP 2

Setup Spoofed Environment

The attacker creates a fake website or app mimicking a legitimate service to deceive users.

STEP 3

Credential Harvesting

Users are tricked into entering sensitive information, allowing attackers to gain access to their accounts.

STEP 4

Unauthorized Transactions

With access to the victim's account, attackers execute unauthorized transactions, siphoning funds.

Technical Analysis

Фишинг с использованием льда attacks often involve the use of malicious smart contracts that exploit users by redirecting transactions to the attacker's wallet. Attackers employ social engineering techniques to lure victims into signing transactions that they believe are legitimate. These transactions often use clever code obfuscation to hide the true nature of the transaction. Attackers also leverage compromised infrastructure, such as DNS servers or hosting services like those registered through arin or Vercel Inc., to create convincing phishing environments. By mimicking legitimate services, these attacks bypass traditional security checks, making detection challenging.

Real Cases

Ethereum Wallet Scam (2023)

$1.2 million stolen

Attackers used a fake wallet service to steal credentials, resulting in a substantial loss of Ethereum funds.

Crypto Exchange Phishing (2024)

$2.5 million stolen

A phishing site mimicking a popular exchange tricked users into entering their login details, leading to significant asset theft.

DeFi Platform Breach (2024)

$3.8 million stolen

A decentralized finance platform was targeted by ice phishers who exploited smart contract vulnerabilities to siphon funds.

How to Detect

Unusual domain names that closely resemble legitimate services

Unexpected requests for private keys or seed phrases

Emails or messages urging immediate action on your crypto assets

Anomalies in transaction requests, such as unexpected gas fees

Lack of HTTPS encryption on websites requiring sensitive input

How to Protect Yourself

1 Always verify the URL before entering sensitive information

2 Enable two-factor authentication on all accounts

3 Regularly monitor transaction logs for unauthorized activities

4 Educate yourself about common phishing tactics

5 Use hardware wallets for enhanced security

Frequently Asked Questions

What is Фишинг с использованием льда?

Фишинг с использованием льда is a cyber threat where attackers deceive users into authorizing fraudulent transactions by mimicking legitimate services.

How much money has been stolen through Фишинг с использованием льда?

Фишинг с использованием льда has resulted in millions of dollars of losses, with notable cases like the Ethereum Wallet Scam in 2023 costing $1.2 million.

How do I protect myself from Фишинг с использованием льда?

Stay vigilant, verify URLs, use two-factor authentication, and maintain awareness of phishing tactics to protect yourself.

What should I do if I'm a victim of Фишинг с использованием льда?

Immediately report to your financial institution, change credentials, and alert local authorities and platforms like PhishDestroy.

Data sourced from PhishDestroy threat intelligence database — 40 domains tracked for this threat type

Фишинг с использованием льда — Threat Intelligence Token Approval Low Activity

Домены

Alive

Taken Down

8.3

Avg VT

7.5%