Binance Square

PHISHING

171,741 views
82 Discussing
BullishHacket
--
--
Bullish
See original
The Scams of #phishing Beware of those p2p that ask you to scan the QR code of your binance web login! A form of cyber crime in which attackers impersonate legitimate entities such as banks, payment platforms, airlines, or even personal contacts to deceive victims and obtain confidential information such as passwords, bank details, or card numbers. $BTC {future}(BTCUSDT) #pishingscam #BTCReclaims120K
The Scams of #phishing
Beware of those p2p that ask you to scan the QR code of your binance web login!

A form of cyber crime in which attackers impersonate legitimate entities such as banks, payment platforms, airlines, or even personal contacts to deceive victims and obtain confidential information such as passwords, bank details, or card numbers.
$BTC
#pishingscam #BTCReclaims120K
Serenity : 🧠 You Are the Final Firewall A major cyberattack has just compromised over 184 million user credentials, affecting global tech giants including Google, Apple, and Microsoft. The hackers exploited multiple systems and leaked login #data across the dark web — exposing the alarming fragility of password based #security models. 🔐 The attackers broke through every wall – but sAxess ensures there’s one they can’t cross: Your fingerprint. ✅ No more passwords to steal ✅ No #phishing traps to fall into ✅ No central databases to breach ✅ Your identity, secured by biometrics + blockchain #Serenity #sAxess isn’t just a wallet. It’s a personal firewall. A biometric, self-custodial solution that removes traditional vulnerabilities and gives you total control over your digital access. With sAxess, you become the key. And hackers can’t steal what they can’t replicate.
Serenity : 🧠 You Are the Final Firewall

A major cyberattack has just compromised over 184 million user credentials, affecting global tech giants including Google, Apple, and Microsoft. The hackers exploited multiple systems and leaked login #data across the dark web — exposing the alarming fragility of password based #security models.

🔐 The attackers broke through every wall – but sAxess ensures there’s one they can’t cross:

Your fingerprint.

✅ No more passwords to steal
✅ No #phishing traps to fall into
✅ No central databases to breach
✅ Your identity, secured by biometrics + blockchain

#Serenity #sAxess isn’t just a wallet. It’s a personal firewall. A biometric, self-custodial solution that removes traditional vulnerabilities and gives you total control over your digital access.

With sAxess, you become the key.

And hackers can’t steal what they can’t replicate.
See original
According to security firm Web3 Scam Sniffer, over $127 million in #Criptomonedas was stolen from investors in Q3 2024, with approximately $46 million lost in September to phishing attacks. In phishing attacks, scammers trick investors into linking their crypto wallets, such as #MetaMask , to fraudulent services. Linking crypto wallets to #phishing websites allows scammers to withdraw#cryptocurrenciesfrom users without further authentication.
According to security firm Web3 Scam Sniffer, over $127 million in #Criptomonedas was stolen from investors in Q3 2024, with approximately $46 million lost in September to phishing attacks.

In phishing attacks, scammers trick investors into linking their crypto wallets, such as #MetaMask , to fraudulent services. Linking crypto wallets to #phishing websites allows scammers to withdraw#cryptocurrenciesfrom users without further authentication.
See original
🔐 Do you have crypto? Then you need to protect it. The market does not forgive those who are distracted. Here are the 3 basics to know: 1️⃣ Use a secure wallet Start with a non-custodial (e.g., Metamask, Trust Wallet) If you invest significant amounts, consider a hardware wallet 2️⃣ Never share the seed phrase Not even with friends, not even as a joke Write it down offline. Better on paper, in multiple copies 3️⃣ Watch out for phishing Don't click on strange links Always check that the site is the real one 🧠 Crypto is freedom, but it requires responsibility. 🔁 Follow me to learn how to manage it without getting scammed. $BTC #CryptoSicurezza #SeedPhras #Phishing #CryptoMindset
🔐 Do you have crypto? Then you need to protect it.

The market does not forgive those who are distracted. Here are the 3 basics to know:

1️⃣ Use a secure wallet

Start with a non-custodial (e.g., Metamask, Trust Wallet)

If you invest significant amounts, consider a hardware wallet

2️⃣ Never share the seed phrase

Not even with friends, not even as a joke

Write it down offline. Better on paper, in multiple copies

3️⃣ Watch out for phishing

Don't click on strange links

Always check that the site is the real one

🧠 Crypto is freedom, but it requires responsibility.

🔁 Follow me to learn how to manage it without getting scammed.

$BTC

#CryptoSicurezza #SeedPhras #Phishing #CryptoMindset
Stay #SAFU on X and other socials. @JasonYanowitz on X narrates his #hack odeal. I got hacked yesterday. At the risk of looking foolish, I'll share how it happened so you can avoid this nightmare. For the past few weeks, people have been trying to get into my accounts. #Crypto accounts, email, twitter, etc... every few days I get an email that someone is trying to access one of my accounts. Thankfully I have non-text #2FA set up for everything so nothing got hacked. So when I got back from dinner last night and saw this email, I panicked. Someone in North Cyprus had finally managed to hack into my account. I guess my security wasn't strong enough and they found a loophole. I clicked the link to "secure my account". I entered my username and password, updated to a new password, and voila: I'm back in. Crisis averted. Or so I thought. Moments later, I got an email saying my email address had been changed. This was the real hack. I was now officially locked out of my account. So how did this happen? It turns out the original email, which looks incredibly real, was not so real. Most email clients hide the actual address. But when you expand it, you can see that this email was sent from "[email protected]" Fake address. I got phished. Very foolish mistake. I don't open Google Docs when they're sent to me. I don't click links. I typically check addresses. But Friday 8pm after a long week, they got me. I am aware this thread exposes a pretty dumb mistake but if I can save one person from this same mistake, it's worth it. Some takeaways: - Don't click links - If you do click a link, review the actual email address - Set up non-text 2FA on everything - If you've done that, trust your own security process - If you think you've been hacked, slow down and think about how this could have happened Big thank you to @KeithGrossman and some folks at X for helping me get my account back so quickly. If you're still reading, go read the self-audit series from @samczsun. And this best practices from @bobbyong. Lot more you can do but start there. #phishing
Stay #SAFU on X and other socials.

@JasonYanowitz on X narrates his #hack odeal.

I got hacked yesterday. At the risk of looking foolish, I'll share how it happened so you can avoid this nightmare. For the past few weeks, people have been trying to get into my accounts. #Crypto accounts, email, twitter, etc... every few days I get an email that someone is trying to access one of my accounts. Thankfully I have non-text #2FA set up for everything so nothing got hacked. So when I got back from dinner last night and saw this email, I panicked.
Someone in North Cyprus had finally managed to hack into my account. I guess my security wasn't strong enough and they found a loophole.
I clicked the link to "secure my account". I entered my username and password, updated to a new password, and voila: I'm back in. Crisis averted. Or so I thought. Moments later, I got an email saying my email address had been changed.

This was the real hack.

I was now officially locked out of my account. So how did this happen? It turns out the original email, which looks incredibly real, was not so real. Most email clients hide the actual address.
But when you expand it, you can see that this email was sent from "[email protected]" Fake address. I got phished. Very foolish mistake. I don't open Google Docs when they're sent to me. I don't click links. I typically check addresses. But Friday 8pm after a long week, they got me. I am aware this thread exposes a pretty dumb mistake but if I can save one person from this same mistake, it's worth it.

Some takeaways:
- Don't click links
- If you do click a link, review the actual email address
- Set up non-text 2FA on everything
- If you've done that, trust your own security process
- If you think you've been hacked, slow down and think about how this could have happened
Big thank you to @KeithGrossman and some folks at X for helping me get my account back so quickly.
If you're still reading, go read the self-audit series from @samczsun.
And this best practices from @bobbyong.
Lot more you can do but start there. #phishing
--
Bearish
Twenty malicious #npm packages impersonating the #Hardhat #Ethereum✅ development environment have targeted private keys and sensitive data. These packages, downloaded over 1,000 times, were uploaded by three accounts using #typosquatting techniques to trick developers. Once installed, the packages steal private keys, mnemonics, and configuration files, encrypt them with a hardcoded AES key, and send them to attackers. This exposes developers to risks like unauthorized transactions, compromised production systems, #phishing , and malicious dApps. Mitigation tips: Developers should verify package authenticity, avoid typosquatting, inspect source code, store private keys securely, and minimize dependency usage. Using lock files and defining specific versions can also reduce risks. $ETH {future}(ETHUSDT)
Twenty malicious #npm packages impersonating the #Hardhat #Ethereum✅ development environment have targeted private keys and sensitive data. These packages, downloaded over 1,000 times, were uploaded by three accounts using #typosquatting techniques to trick developers. Once installed, the packages steal private keys, mnemonics, and configuration files, encrypt them with a hardcoded AES key, and send them to attackers. This exposes developers to risks like unauthorized transactions, compromised production systems, #phishing , and malicious dApps.

Mitigation tips: Developers should verify package authenticity, avoid typosquatting, inspect source code, store private keys securely, and minimize dependency usage. Using lock files and defining specific versions can also reduce risks.
$ETH
#PeckShieldAlert A #phishingscam address labeled "Fake_Phishing442897," which stole $55.4M in #DAI from a whale's account, has swapped 250K $DAI for 102.6 $ETH & transferred them to a new address 0x2751...fC12 The #phishing address currently holds ~$40.5m worth of cryptos, including ~15.18K $ETH, ~2.8M $DAI & ~327.3 $stETH
#PeckShieldAlert
A #phishingscam address labeled "Fake_Phishing442897," which stole $55.4M in #DAI from a whale's account, has swapped 250K $DAI for 102.6 $ETH & transferred them to a new address 0x2751...fC12
The #phishing address currently holds ~$40.5m worth of cryptos, including ~15.18K $ETH , ~2.8M $DAI & ~327.3 $stETH
What's the first thing I do - and You should too - when received an #email from #Binance ? I check my anti- #phishing code ✅ Did you set it up? Cheers 🥂
What's the first thing I do - and You should too - when received an #email from #Binance ?

I check my anti- #phishing code ✅

Did you set it up?

Cheers 🥂
See original
#CryptoScamSurge The crypto community facing scams: how to recognize, prevent, and act. The rise in cryptocurrency prices has brought with it a concerning increase in increasingly elaborate frauds, threatening the credibility of the crypto environment and opening the door to greater regulatory controls. How can the crypto ecosystem respond? 🔹 Continuous education: It is vital to share information about frauds such as rug pulls, phishing, misleading giveaways, and emotional scams. Workshops, educational threads, and open resources can make a difference. 🔹 Real transparency: Encourage projects to present clear documentation, verifiable teams, and publicly available audits. 🔹 Joint action: Platforms, wallets, and users must work together by sharing lists of scammers and reporting suspicious activities. 🔹 Analytical tools: Promote the use of services like Token Sniffer or DEXTools to evaluate contracts and tokens before investing. 🔹 Active support for victims: Create spaces where users can report scams and share alerts to prevent others from falling victim. Main crypto scams in 2025 ⚠️ Deepfakes: Manipulated videos or audios where supposed celebrities promote false investments. ⚠️ Pig Butchering: Emotional scams that build false relationships to later steal funds. ⚠️ Rug pulls and pump & dump schemes: Projects that inflate their value and disappear with the money. ⚠️ Phishing and wallet draining: Malicious sites and apps designed to steal keys and crypto assets. ⚠️ Malware on Telegram or direct messages: Disguised applications and bots that install spyware or extract sensitive data. The best defense remains knowledge and teamwork. Share this information with your community and stay vigilant. #CriptoEstafasAumen #CriptoSeguridad #BinanceSquare #CriptoEducación #DeFi #phishing #RugPull
#CryptoScamSurge
The crypto community facing scams: how to recognize, prevent, and act.

The rise in cryptocurrency prices has brought with it a concerning increase in increasingly elaborate frauds, threatening the credibility of the crypto environment and opening the door to greater regulatory controls.

How can the crypto ecosystem respond?
🔹 Continuous education: It is vital to share information about frauds such as rug pulls, phishing, misleading giveaways, and emotional scams. Workshops, educational threads, and open resources can make a difference.
🔹 Real transparency: Encourage projects to present clear documentation, verifiable teams, and publicly available audits.
🔹 Joint action: Platforms, wallets, and users must work together by sharing lists of scammers and reporting suspicious activities.
🔹 Analytical tools: Promote the use of services like Token Sniffer or DEXTools to evaluate contracts and tokens before investing.
🔹 Active support for victims: Create spaces where users can report scams and share alerts to prevent others from falling victim.

Main crypto scams in 2025
⚠️ Deepfakes: Manipulated videos or audios where supposed celebrities promote false investments.
⚠️ Pig Butchering: Emotional scams that build false relationships to later steal funds.
⚠️ Rug pulls and pump & dump schemes: Projects that inflate their value and disappear with the money.
⚠️ Phishing and wallet draining: Malicious sites and apps designed to steal keys and crypto assets.
⚠️ Malware on Telegram or direct messages: Disguised applications and bots that install spyware or extract sensitive data.

The best defense remains knowledge and teamwork. Share this information with your community and stay vigilant.

#CriptoEstafasAumen #CriptoSeguridad #BinanceSquare #CriptoEducación #DeFi #phishing #RugPull
🛡️ Cyber Alert: North Korean Hackers Target Individual Crypto Investors 🚨Recent reports confirm that North Korean state-backed hacking groups have intensified cyberattacks—specifically targeting individual crypto investors. 🎯 Their tactics include: 👉Phishing emails disguised as exchange notifications or wallet updates 👉Fake investment platforms that steal private keys and seed phrases 👉Malware hidden in seemingly legit trading tools 🔍 These attacks aim to steal funds and compromise wallets, bypassing centralized exchanges and going directly after individuals. 📢 Protect Yourself: ✅ Never share your seed phrase or private key ✅ Always double-check URLs and email sources ✅ Use hardware wallets and 2FA whenever possible ✅ Stay updated on the latest security practices 📊 As crypto adoption grows, so does the sophistication of cyber threats. Stay informed, stay secure. 🔐 Security is not just an option—it's a responsibility. #CryptoSecurity #Web3 #BinanceFeed #CyberAttack #ScamAlert #phishing #StaySafeCrypto

🛡️ Cyber Alert: North Korean Hackers Target Individual Crypto Investors 🚨

Recent reports confirm that North Korean state-backed hacking groups have intensified cyberattacks—specifically targeting individual crypto investors.

🎯 Their tactics include:

👉Phishing emails disguised as exchange notifications or wallet updates

👉Fake investment platforms that steal private keys and seed phrases

👉Malware hidden in seemingly legit trading tools
🔍 These attacks aim to steal funds and compromise wallets, bypassing centralized exchanges and going directly after individuals.

📢 Protect Yourself: ✅ Never share your seed phrase or private key
✅ Always double-check URLs and email sources
✅ Use hardware wallets and 2FA whenever possible
✅ Stay updated on the latest security practices

📊 As crypto adoption grows, so does the sophistication of cyber threats. Stay informed, stay secure.

🔐 Security is not just an option—it's a responsibility.

#CryptoSecurity #Web3 #BinanceFeed #CyberAttack #ScamAlert #phishing #StaySafeCrypto
🚨 ALERT: ENS founder Nick Johnson warns of an "extremely sophisticated" Google phishing scam targeting users with fake subpoena notices. 🛑 ⚠️ The emails pass DKIM checks and appear as legit Gmail security alerts. 📩 Stay sharp — even your inbox isn’t safe. #Phishing #Crypto #CyberSecurity #ENS #Web3
🚨 ALERT: ENS founder Nick Johnson warns of an "extremely sophisticated" Google phishing scam targeting users with fake subpoena notices. 🛑

⚠️ The emails pass DKIM checks and appear as legit Gmail security alerts.

📩 Stay sharp — even your inbox isn’t safe.

#Phishing #Crypto #CyberSecurity #ENS #Web3
@Torkelrogstad: Brand new scam technique just dropped: #github bots trying to phish you into downloading #Malware . Within a minute of creating an issue mentioning the words "seed derivation" and "xpriv", a shady-looking link was posted by a bot. Stay vigilant, folks! #phishing #Hacked
@Torkelrogstad: Brand new scam technique just dropped: #github bots trying to phish you into downloading #Malware .

Within a minute of creating an issue mentioning the words "seed derivation" and "xpriv", a shady-looking link was posted by a bot.

Stay vigilant, folks! #phishing #Hacked
See original
🚨 I want to share something that happened to me so that no one else falls into this trap... Recently, I received a message with a link that looked official, claiming to be from Binance. I thought it was normal because I always receive notifications. However, that link was a phishing attack. Without realizing it, I entered my details and within minutes, I lost 300USDT💸 from my wallet. It was a hard blow, not only because of the money but also because I realized how easy it is to fall into these traps if you're not alert. Since then, I learned three key things to protect myself: ✔️ Never click on links that you do not verify yourself. ✔️ Always check that the URL is the official and secure one. ✔️ Enable two-factor authentication (2FA) for added security. I tell you this because I want you to be cautious and not make the same mistake. Phishing is one of the most common scams, and the best defense is prevention. Share this story so that more people do not fall into these traps. $PEPE #phishing #SeguridadCripto #CryptoTips #BinanceSquare #dyor
🚨 I want to share something that happened to me so that no one else falls into this trap...

Recently, I received a message with a link that looked official, claiming to be from Binance. I thought it was normal because I always receive notifications. However, that link was a phishing attack.

Without realizing it, I entered my details and within minutes, I lost 300USDT💸 from my wallet. It was a hard blow, not only because of the money but also because I realized how easy it is to fall into these traps if you're not alert.

Since then, I learned three key things to protect myself:
✔️ Never click on links that you do not verify yourself.
✔️ Always check that the URL is the official and secure one.
✔️ Enable two-factor authentication (2FA) for added security.

I tell you this because I want you to be cautious and not make the same mistake. Phishing is one of the most common scams, and the best defense is prevention.

Share this story so that more people do not fall into these traps.
$PEPE

#phishing #SeguridadCripto #CryptoTips #BinanceSquare #dyor
--
Bullish
Important Update🏮 Check this post before you lose your funds. As the bull market approaches, beware of the phishing scams currently taking place in the crypto world. Many fraudsters are using this market appreciation to send phishing emails and tokens to unsuspecting investors. • What is a phishing scam? Phishing scams are deceptive attempts to trick individuals into disclosing sensitive information such as usernames, passwords or financial details. These scams, usually perpetrated through fake emails, messages or websites, often impersonate legitimate organizations. • What you need to do to avoid becoming a victim: Don't click on unknown links and look for red flags in incoming messages, such as unusual return addresses, typos, or requests for sensitive information. Verify the legitimacy of requests through official channels by adding additional layers of protection, such as two-factor authentication. Don't try to sell random tokens or NFTs that appear in your wallet. Have a dedicated phone or PC for trading and wallet related activities. Remember: Your generous tips ❤️ will empower us to share more valuable content. #HotTrends #Write2Earn #phishing #cryptoonline
Important Update🏮

Check this post before you lose your funds.
As the bull market approaches, beware of the phishing scams currently taking place in the crypto world. Many fraudsters are using this market appreciation to send phishing emails and tokens to unsuspecting investors.

• What is a phishing scam?

Phishing scams are deceptive attempts to trick individuals into disclosing sensitive information such as usernames, passwords or financial details. These scams, usually perpetrated through fake emails, messages or websites, often impersonate legitimate organizations.

• What you need to do to avoid becoming a victim:

Don't click on unknown links and look for red flags in incoming messages, such as unusual return addresses, typos, or requests for sensitive information.

Verify the legitimacy of requests through official channels by adding additional layers of protection, such as two-factor authentication.

Don't try to sell random tokens or NFTs that appear in your wallet.

Have a dedicated phone or PC for trading and wallet related activities.

Remember: Your generous tips ❤️ will empower us to share more valuable content.
#HotTrends #Write2Earn #phishing #cryptoonline
Quoted content has been removed
See original
🚨$7.8 Million SolvBTC Lost Due to Phishing Scam🚨 A user has lost $7.8 million worth of SolvBTC after falling for a phishing scam. The incident, detected by Scam Sniffer, occurred within a span of 34 minutes, highlighting the security risks in the cryptocurrency world. What additional measures do you think should be implemented to protect users from these scams? 🤔🔒💰 #Criptomonedas #SeguridadOnline #Phishing $VET $VTHO $VANRY
🚨$7.8 Million SolvBTC Lost Due to Phishing Scam🚨

A user has lost $7.8 million worth of SolvBTC after falling for a phishing scam. The incident, detected by Scam Sniffer, occurred within a span of 34 minutes, highlighting the security risks in the cryptocurrency world. What additional measures do you think should be implemented to protect users from these scams? 🤔🔒💰

#Criptomonedas #SeguridadOnline #Phishing
$VET $VTHO $VANRY
See original
🔴 Phishing is attacking: scammers are sending fake SMS messages on behalf of Binance If you received a suspicious SMS from Binance — don't panic, but stay alert. A massive phishing attack on exchange users has been recorded online. 📌 What's happening: • Users are receiving SMS messages with alarming notifications such as: — "New 2FA binding detected" — "API connection to Ledger Live" • The victim is urged to urgently call a fake "support service" • Some messages even arrive in the same chat as real Binance notifications • Data leaks from Binance and Gemini users may have reached the dark web — hence the targeted attacks 🛡 Binance has already responded: — The anti-phishing code now works in SMS as well, not just in email — The code is created by the user and will be displayed in all official messages ⚠️ Impact on the crypto market — neutral, but reputational risks and growing distrust of centralized platforms remain. And now the question: do you have the anti-phishing code enabled? Subscribe to know where phishing is, and where it's truly 🔴 #bitcoin #crypto #Binance #security #phishing $BNB $BTC $ETH
🔴 Phishing is attacking: scammers are sending fake SMS messages on behalf of Binance

If you received a suspicious SMS from Binance — don't panic, but stay alert.

A massive phishing attack on exchange users has been recorded online.

📌 What's happening:

• Users are receiving SMS messages with alarming notifications such as:

— "New 2FA binding detected"

— "API connection to Ledger Live"

• The victim is urged to urgently call a fake "support service"

• Some messages even arrive in the same chat as real Binance notifications

• Data leaks from Binance and Gemini users may have reached the dark web — hence the targeted attacks

🛡 Binance has already responded:

— The anti-phishing code now works in SMS as well, not just in email

— The code is created by the user and will be displayed in all official messages

⚠️ Impact on the crypto market — neutral, but reputational risks and growing distrust of centralized platforms remain. And now the question: do you have the anti-phishing code enabled?

Subscribe to know where phishing is, and where it's truly 🔴

#bitcoin #crypto #Binance #security #phishing $BNB $BTC $ETH
What an #unlucky guy! He got 275,700 $LINK ($4.42M) stolen by a #phishing #attack . This guy accumulated 290,750 #LINK ($2.26M) at $7.8 from #exchanges between Jun 7, 2022, and Oct 14, 2023, a profit of nearly ~$2.4M currently. Unfortunately, he accidentally clicked on the phishing link and was deceived into signing the approval transaction. Ultimately, he lost a profit of $2.4M and a cost of $2.26M, a total loss of $4.66M!
What an #unlucky guy!

He got 275,700 $LINK ($4.42M) stolen by a #phishing #attack .

This guy accumulated 290,750 #LINK ($2.26M) at $7.8 from #exchanges between Jun 7, 2022, and Oct 14, 2023, a profit of nearly ~$2.4M currently.

Unfortunately, he accidentally clicked on the phishing link and was deceived into signing the approval transaction.

Ultimately, he lost a profit of $2.4M and a cost of $2.26M, a total loss of $4.66M!
Login to explore more contents
Explore the latest crypto news
⚡️ Be a part of the latests discussions in crypto
💬 Interact with your favorite creators
👍 Enjoy content that interests you
Email / Phone number