Recently, encrypted users have encountered a large-scale WeChat account theft crisis, with many users reporting abnormal 'SMS verification code login' prompts, followed by incidents of stolen digital assets such as USDT.
According to the Bit Jungle security team, attackers are using leaked account password databases, combined with the target user's social graph on WeChat, including frequently contacted friends or group chat interaction records, to accurately obtain 6-digit verification codes for account theft.
Covert attacks, precise harvesting
Criminals often choose to act late at night, taking advantage of users' weakened awareness during these times to completely take over WeChat accounts for fraud.
The core goal targets the encrypted OTC U trading group, exploiting the trust relationship established by stolen accounts to send false transaction requests to contacts, resulting in significant asset losses for victims. Even more concerning is that such attacks are difficult to trace in WeChat login device records and are highly covert.
Bit Jungle security protection tips
1. Be cautious when adding friends
Disable the 'Search and add via phone number' feature, strictly review WeChat friend requests, especially from unidentified individuals involved in encrypted transactions.
2. Change password immediately
If you haven't updated your WeChat password for a long time, please set a high-strength unique password immediately and enable login device management.
3. Be highly vigilant about login alerts
Maintain zero tolerance for any login risk alerts not initiated by the user, freeze the account immediately and investigate.
4. Social protection
Remove unknown origin friends to avoid adding group chat participants; be wary of 'friend assistance verification' requests during late night hours.
5. Transaction double confirmation
When involved in encrypted asset transactions, identity verification must be conducted through secondary channels (voice/video).
WeChat has now become a key link in the security chain of digital assets. Bit Jungle calls on all users to strengthen their social account defenses and be wary of late-night 'friend' trading invitations to jointly protect digital asset security.
