DuckDuckGo’s Search Errors Lead to Etherscan Phishing Scams
Financial Risks for Cryptocurrency Investors
DuckDuckGo, a search engine known for its privacy features, has been displaying fraudulent websites that mimic Etherscan, a widely-used Ethereum block explorer and analytics platform. This error exposes cryptocurrency investors to significant financial risks.
Phishing Attempts on Etherscan Users
On September 11, Scam Sniffer, a Web3 anti-scam firm, warned DuckDuckGo users about a phishing attack targeting Ethereum (ETH) investors. These phishing websites prompt users to connect their MetaMask wallets, similar to the genuine Etherscan site. Once users approve the connection, attackers gain access to withdraw funds without further authorization.
The Importance of URL Verification
Verifying URLs before connecting crypto wallets is crucial. Attackers use various methods to rank their phishing websites on popular search engines like Google and Bing. Some manipulate search algorithms for organic rankings, while others use sponsored banner ads to attract victims.
Massive Losses from Phishing Attacks
Scam Sniffer reported that on September 10, a user lost over $520,000 in cryptocurrencies by unknowingly signing a phishing signature. In August, over 9,100 victims lost approximately $63 million to crypto phishing scams. The amount stolen has increased by 215% compared to the previous year, despite a decrease in the number of victims. One notable case involved a victim losing $55 million in Dai (DAI) in a phishing attack.
Phishing on Other Platforms
In July, blockchain security firm SlowMist alerted users to a large-scale phishing attack on The Open Network (TON), a Telegram-linked blockchain platform. According to SlowMist founder Yu Xian, phishing links and bot forms spread through Telegram message groups, airdrops, and other deceptive methods to lure users’ TON wallets. The risk is higher for users with anonymous numbers, often used to create Telegram accounts not tied to SIM cards.
Conclusion
Phishing attacks are a growing threat in the cryptocurrency world. Verifying URLs and exercising caution when connecting crypto wallets are essential steps in protecting one’s assets. Users should stay informed about the latest phishing tactics and remain vigilant to avoid falling victim to these scams.
