According to SlowMist experts, a group of attackers have managed to steal more than $15 million in Bitcoin, Ethereum, USDT and other cryptocurrencies through a fake HitBTC exchange website.
The company's specialists have said the phishing site uses three methods to steal cryptocurrencies from users.
Subscribe to our Telegram channel to get daily short digests about events that shape the crypto world
On the one hand, if the wallet connection is approved, the fraudsters get unlimited access to USDT assets. On the other, like a real exchange, the site offers to make a deposit to the scammers' address. Moreover, as in many similar cases, the digital signature field appears automatically and when clicking the "Confirm" button, the victim is deprived of all assets in Ethereum.
The latter method has been used by some unknown individuals who launched a phishing advertising campaign for cryptocurrency projects such as Lido, DeFi Llama and Zapper on the Google search engine, with which they stole $4.16 million.
Changpeng Zhao, CEO of Binance, said in October last year the service promoted such fraudulent sites.