.jpeg)
Crypto scammers are increasingly turning to Telegram as their platform of choice for executing malware scams, with a staggering 2000% increase in such activities since November. This shift marks a significant evolution in tactics, as scammers adapt to heightened user awareness of traditional phishing methods.
Source: Scam Sniffer
Key Takeaways
-
Dramatic Increase: Telegram malware scams have surged by 2000% since November.
-
Evolving Tactics: Scammers are moving away from simple phishing to more sophisticated malware distribution.
-
Fake Verification Bots: Scammers are using fake bots to inject malware into users' systems.
-
Broader Access: Malware allows attackers to access sensitive information, making losses harder to track.
The Shift to Telegram
The security firm Scam Sniffer first raised concerns about Telegram malware scams in December, noting that scammers have evolved their strategies to ensnare unsuspecting victims. Unlike traditional scams that often involve tricking users into connecting their wallets to fraudulent sites, the new tactics involve distributing malware through fake verification bots in various Telegram groups.
How Scammers Operate
Scammers are now utilizing fake trading, airdrop, and alpha groups to lure users. Once individuals join these groups, they are prompted to verify their identity through a fake bot. This bot can install malware that:
-
Accesses passwords
-
Scans for wallet files
-
Monitors clipboard data
-
Steals browser information
Scam Sniffer has identified at least two malicious bots, OfficiaISafeguardRobot and SafeguardsAuthenticationBot, that are being used to execute these scams.
The Impact of Malware
The shift to malware-based scams is particularly concerning because it allows scammers to gain broader access to victims' systems. Unlike traditional phishing scams, where losses can be more easily tracked, malware attacks complicate the process of identifying and quantifying losses. This makes it challenging for victims to recover stolen assets.
Targeting Influencers and Communities
Initially, scammers impersonated popular crypto influencers to invite users to Telegram groups. However, as user awareness has increased, they have begun targeting legitimate project communities with seemingly harmless invitations. This change indicates a sophisticated understanding of social engineering tactics, as scammers leverage trust within established communities to gain access to potential victims.
The Bigger Picture
According to a report by Cyvers, the total amount of cryptocurrency stolen in 2024 reached $2.3 billion across 165 incidents, marking a 40% increase from the previous year. While December saw the lowest losses for the year, the overall trend indicates that scammers are becoming more adept at exploiting vulnerabilities in the crypto space.