.png)
Several cryptocurrency data aggregators have been found to host phishing links related to the controversial Central African Republic (CAR) memecoin. This alarming discovery raises significant concerns for investors who may unknowingly click on malicious links while researching the token, which was initially promoted by the country's president as a means to support national development.
Key Takeaways
-
Phishing links have been identified on various platforms associated with the CAR memecoin.
-
The official X account of CAR President Faustin-Archange Touadéra has been suspended, and the project's website is currently down.
-
Cybersecurity experts warn that community-controlled crypto aggregators pose security risks due to their open modification policies.
Phishing Links Found
Cybersecurity experts have reported that several cryptocurrency data aggregators, including CoinGecko, have been directing users to phishing sites. The CAR memecoin gained attention after President Touadéra's official X account claimed the government had launched an experimental token aimed at uniting people and supporting national development.
However, the project's Telegram group, which was linked from major data providers, was found to contain malicious links. After being alerted by Scam Sniffer, CoinGecko promptly removed the Telegram reference.
Malicious Telegram Group
The Telegram group associated with the CAR memecoin, created on February 3, has around 2,000 subscribers. Initially silent, the group posted a vague message on February 5, stating, "ca soon." Scam Sniffer identified a fake "Safeguard" bot within the group, which is a known phishing tool. This is not the first time such fraudulent bots have targeted crypto users on Telegram.
Broader Phishing Schemes
The phishing schemes linked to the CAR memecoin extend beyond Telegram. A suspicious link was discovered on the trading platform GMGNAI, which led users to a Linktree page instead of an official site. This page included a supposed livestream on the video platform Kick, but it redirected users to a fake CAPTCHA page that executed malicious code.
Security Risks in Community-Controlled Aggregators
Many cryptocurrency data aggregators allow community members to modify token-related information, which can lead to security vulnerabilities. This open modification policy means that the entity that launched the token may not always be responsible for the information displayed online.
As Fun, the founder of Scam Sniffer, noted, the security risks depend on the review process of these platforms. Links can be modified after passing initial reviews, making it difficult for investors to discern legitimate information from malicious content.
Growing Skepticism
The announcement of the CAR memecoin, which was posted from the president's verified account, has sparked skepticism regarding its legitimacy. Some reports suggest that the promotion of the token may have involved an AI-generated deepfake. This skepticism is compounded by the emergence of other questionable accounts claiming to be associated with prominent African leaders, further muddying the waters surrounding the CAR memecoin.
As the cryptocurrency landscape continues to evolve, investors are urged to exercise caution and conduct thorough research before engaging with new tokens, especially those linked to high-profile figures or governments. The recent phishing incidents serve as a stark reminder of the potential dangers lurking in the crypto space, highlighting the need for vigilance and security awareness among investors.
Sources
This article was written with the assistance of AI to gather information from multiple reputable sources. The content has been reviewed and edited by our editorial team to ensure accuracy and coherence. The views expressed are those of the author and do not necessarily reflect the views of EOS Support. Original reporting sources are credited whenever appropriate and as required. This article is for informational purposes only and does not constitute financial advice.