Kaspersky Detects Over 1,500 Fraudulent Global Resources Targeting Potential Crypto Investors and Highlights the Threat of Malicious Crypto Miners in Africa
The most common schemes used by cybercriminals included:
- Creating fake cryptocurrency exchange websites: in this case, the user is allegedly given a coupon for replenishing an account on a crypto exchange. However, to use it they must carry out a verification payment of usually no more than 0.005 Bitcoin (about 200 US dollars), which becomes the cybercriminalsā profit.
- Sending messages about fake sales of video cards and other equipment for mining: to purchase equipment, the user needs to make an advance payment. After providing it, the author of the ads stops communicating.
- Creating phishing pages with various content to steal private keys, which allow cybercriminals to gain access to all digital assets associated with a crypto wallet.
Globally (https://bit.ly/2WKLcfW), cryptocurrency mining malware wreaked havoc in 2018, infecting more than five million people in the first three quarters of that year. And Kasperskyās research shows that in some African countries, the threat of malicious crypto miners, remains prevalent. Currently in South Africa, the share of all users targeted by malicious crypto miners in H1 2021 was 0.60%. In Kenya, the share of all users targeted was 0.85% and in Nigeria, 0.71%.
āAlthough these percentages may be interpreted as low and may not seem significant to users, crypto-miner malware has been identified as one of the top 3 malware families rife in South Africa, Kenya and Nigeria at present, which we believe emphasises that as cryptocurrency continues to gain momentum, more users will likely be targeted,ā says Bethwel Opil, Enterprise Sales Manager at Kaspersky in Africa.
In certain African countries, the share of all users targeted by malicious crypto miners is much higher: Ethiopia shows a share of 3.68% and Rwanda a share of 3.22%.
When looking at the fraudulent global resources detected by Kaspersky, typically, cybercriminals locate sites in popular domain zones: .com, .net, .org, .info, as well as in zones where domain acquisition is cheap: .site, .xyz, .online, .top, .club, .live. A distinctive feature of phishing and other types of cryptocurrency fraud is the high level of detail on phishing websites. For example, on fake crypto exchanges, real data, such as bitcoin rates, is often loaded from existing exchanges. Attackers understand that people who are investing or are interested in this area are often more tech-savvy than the average user. Therefore, the cybercrooks make their techniques more complex in order to get data and money from these people.
āLately, many have become interested in cryptocurrencies, and attackers would not pass up the opportunity to use this to their advantage. At the same time, both those who want to invest or mine cryptocurrency and simply the holders of such funds can find themselves on the fraudstersā radar. For example, one of the schemes we recently discovered went as follows: users received a message about the sale of an exclusive Coronavirus vaccine earlier than official schedules and only for those who have Bitcoins. This type of fraud was especially prevalent when the vaccines just became available. The user went to the site where the contact indicated, to which it was necessary to write to pre-order the vaccine. The target then needed to make an advance payment in Bitcoins, with the money going to the cybercriminals' account and the person receiving nothing in return," said Alexey Marchenko, head of the Content Filtering Methods Development department at Kaspersky.
To avoid becoming a victim of cybercriminals and the threat of malicious crypto miners, Kaspersky recommends that users:
- Do not follow dubious links from letters, messages in messenger apps and social networks.
- Be critical of extremely generous online offers.
- Download applications from official stores only.
- Use a security solution that protects against phishing, scams, and prevents the installation of malicious applications.
- Take extra precautions before purchasing a product in an online store if the company is unknown. It is better to study on special WHOIS-sites information first about how long the domain has existed and who its owner is: if it is completely fresh and registered to a private person, you should not purchase from them.
Visit Kaspersky Daily to learn more about recent crypto-related scams such as a fake ICO (https://bit.ly/3BzOKRf), new tricks scammers use to make users believe their offers are real (https://bit.ly/3Bpqjpi) or luring Discord users to a fake cryptocurrency exchange (https://bit.ly/3t3Wyr8).
Reference:
¹Data based on anonymised statistics of detections by Kaspersky solutions from January to July 2021
Distributed by APO Group on behalf of Kaspersky.
For further information please contact: Nicole Allman | INK&Co. Cell: +27 83 251 2769 nicole@inkandco.co.za
About Kaspersky: Kaspersky is a global cybersecurity and digital privacy company founded in 1997. Kasperskyās deep threat intelligence and security expertise is constantly transforming into innovative security solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The companyās comprehensive security portfolio includes leading endpoint protection and a number of specialized security solutions and services to fight sophisticated and evolving digital threats. Over 400 million users are protected by Kaspersky technologies and we help 240,000 corporate clients protect what matters most to them. Learn more at https://africa.kaspersky.com/.
Follow: Facebook: https://bit.ly/3DDVuPC Twitter: https://bit.ly/38x6EHE YouTube: https://bit.ly/3yx5oPp Instagram: https://bit.ly/2WFGBLM Blog: https://bit.ly/3gPs6MS
Media files