Fun

Address poisoning attacker sends $153K ETH to victim and agrees to negotiate

News Feed - 2024-05-10 03:05:00

Christopher Roark5 hours agoAddress poisoning attacker sends $153K ETH to victim and agrees to negotiateThe attacker who pulled off a $68 million address poisoning scam has posted two messages agreeing to negotiate with the victim.947 Total views2 Total sharesListen to article 0:00NewsOwn this piece of crypto historyCollect this article as NFTJoin us on social networksThe address-poisoning attacker who allegedly tricked a user into sending them $68 million worth of Wrapped Bitcoin (WBTC) has sent $153,000 worth of Ether (ETH) back to the victim in an apparent show of good faith. In the same transaction, the attacker sent a message agreeing to negotiate and asking the victim for a Telegram username where they can be contacted. The amount sent back represents just 0.225% of the total funds allegedly stolen.


Blockchain data shows that on May 5, the attack victim, whose account ends in 8fD5, sent three messages to an account ending in dA6D. The recipient of the message had received funds from the attacking account, labeled “FakePhishing327990” on Etherscan, through several intermediate accounts. This implies that dA6D was likely to have been controlled by the attacker.


The messages implied that the victim was willing to give the attacker 10% of the funds as a bounty and refrain from prosecuting if they returned the other 90%. The victim stated:“We both know there"s no way to clean this funds. You will be traced. We also both understand the ‘sleep well’ phrase wasn"t about your moral and ethical qualities. Nevertheless, we officially admin your right to the 10%. Send 90% back. There are 24 hours for you before 10am UTC, 6th May 2024 to make a decision that will change your life, in any case.”


At 11:37 am UTC on May 9, another account ending in 72F1 responded by sending 51 Ether (ETH) (worth $153,000 at today’s price) to the victim. 72F1 had also received funds from FakePhishing327990 through several intermediate accounts, indicating it was also under the attacker"s control.


In the transaction that sent the 51 ETH, the attacker also posted a message stating “PleaseleaveyourtelegramandIwillcontactyou.” They then attempted to correct their bad punctuation at 11:43 am, posting an additional message that stated: “Please leave your telegram and I will contact you[.]”


In response, the victim posted a Telegram username where they can be contacted.Address poisoning victim negotiates with attacker. Source: Etherscan.


The negotiation occurred after the attacker allegedly tricked the victim into sending 1,155 Wrapped Bitcoin (WBTC) (worth $68 million at the time) into their account by mistake, which they did through an “address poisoning” transaction.


Blockchain data shows that at 09:17 am on May 3, the attacker used a smart contract to transfer 0.05 of a token from the victim’s account to the attacker"s account. The token transferred had no name listed on Etherscan and was simply referred to as “ERC-20.” Under normal circumstances, an attacker cannot transfer a token from another user without their consent. But in this case, the token had a custom design that allowed it to be transferred from an account without the user’s consent.


At 10:31 am on the same day, the victim sent 1,155 WBTC to this address, apparently by mistake. The address may have appeared similar to an address used by the victim to deposit funds into a centralized exchange or for some other reason.


In addition, the victim may have seen that they sent 0.05 of a token to this address in the past and therefore assumed it was safe. However, the 0.05 tokens were sent by the attacker and only appeared to have come from the victim.


When an attacker attempts to confuse victims by spamming them with transactions that appear to be coming from them but are actually coming from the attacker, security experts call it an “address poisoning attack.” Experts recommend that users carefully inspect the sending address in a transaction before confirming it, so as to avoid costly errors from these kinds of attacks.


Related:How to avoid zero-value transfer address poisoning attacks# Bitcoin# Ethereum# Bitcoin Scams# Cybersecurity# ScamsAdd reaction

News Feed

Polkadot and Ethereum 2.0 — A Look at the Solutions Building the Scalability of Tomorrow
Polkadot and Ethereum 2.0 — A Look at the Solutions Building the Scalability of Tomorrow Both Ethereum 2.0 and Polkadot are promising sharding-based protocols overcoming the scal
'Crypto King' Aiden Pleterski faces fraud, money laundering charges
Derek Andersen2 hours ago"Crypto King" Aiden Pleterski faces fraud, money laundering chargesPleterski and an associate were arrested months after multiple investor complaints and months of police investigation.406 Total
Bitcoin, Ethereum Technical Analysis: ETH Drops Below $1,600 Following Completion of The Merge
Bitcoin, Ethereum Technical Analysis: ETH Drops Below $1,600 Following Completion of The Merge Ethereum fell below $1,600 on Thursday, despite the successful completion of the high
Hermi De Ramos12 hours agoAbu Dhabi grants virtual asset firm M2 permission to offer crypto servicesThe M2 platform will launch later in 2023, allowing UAE-based retail and institutional clients to buy, sell and custody
Can Unlimited Fiat and Governments Suppress Bitcoin’s Price? 2 Analysts Discuss the Theory and Odds
Can Unlimited Fiat and Governments Suppress Bitcoin’s Price? 2 Analysts Discuss the Theory and Odds The price of bitcoin has dropped 72.9% in USD value since the crypto asset
Sam Altman’s OpenAI reportedly in partnership talks with his other firm, Worldcoin
Tristan Greene4 hours agoSam Altman’s OpenAI reportedly in partnership talks with his other firm, WorldcoinThe potential partnership comes amid increased regulatory scrutiny for both companies.1477 Total views34 Total
Ex-Head оf Wex Crypto Exchange Reportedly Arrested in Poland, Faces Extradition to Kazakhstan
Ex-Head оf Wex Crypto Exchange Reportedly Arrested in Poland, Faces Extradition to Kazakhstan Dmitry Vasiliev, former chief executive of Russian cryptocurrency exchange Wex, has b
Report: Chinese Company Launches Digital Currency Insurance Product
Report: Chinese Company Launches Digital Currency Insurance Product The Suzhou branch of the Chinese insurance company China Pacific Insurance, together with the Bank of Communicat
2 Swiss Banks Launch Cryptocurrency Trading and Custody After Gaining Regulatory Approval
2 Swiss Banks Launch Cryptocurrency Trading and Custody After Gaining Regulatory ApprovalSwitzerland’s financial regulator, FINMA, has approved two Zurich-based banks to offer
Derek Andersen4 hours agoUS GAO says lack of interagency cooperation needs to be addressed in crypto regulationIn a report requested by Rep. Maxine Waters, the country’s top watchdog is carefully neutral but dissatisfi
Blockchain.com Inks Multi-Year Deal With Dallas Cowboys Star Quarterback Dak Prescott
Blockchain.com Inks Multi-Year Deal With Dallas Cowboys Star Quarterback Dak Prescott The crypto firm Blockchain․com announced on Tuesday that the company has inked a multi-
Bitcoin Triggers Golden Cross: What This Means For The Crypto Trend
Este artículo también está disponible en español. Bitcoin price is now above $70,000 per coin. The recent rally back toward local all-time highs has carried BTCUSD high e