According to Foresight News, SlowMist has issued a warning about a suspicious tool that falsely claims users' wallets have 'risk authorization' issues, prompting them to paste their private keys to resolve the problem. Upon investigation, the website signature[.]land has been identified as a phishing platform and has been flagged as malicious by the Web3 anti-fraud platform ScamSniffer.
The investigation revealed that the website's user interface mimics that of a legitimate Revoke tool, with risk results being fabricated. All user inputs are directly sent to the email address [email protected]. The operator, known as Titan, employs various deceptive tactics, including impersonating SlowMist employees, using the avatar of Zachxbt on Telegram, and commenting under crypto user posts with a 74,000-follower X account, falsely claiming wallet risks and directing users to the phishing link.