SlowMist which is a blockchain security firm released their analysis on what is happening in the market. Their side has identified dozens of crypto addresses that have been victims of fraud on the Terra network since April 12th. The scammer's address has managed to raise $ 4.31 million in crypto at the time of writing.
Based on SlowMist’s explanation on Twitter, assets worth $ 4.31 million were transferred to the suspects to 52 suspects from 52 different addresses between April 12 and April 21. Security analysts found that the majority of attacks were carried out through phishing ads (phishing ads) google.
The fraudulent data ads are designed to entice victims to provide sensitive information/download software that contains malware. In this case, the victim/user has already been caught with the scam when searching for popular Terra projects, including the Anchor and Astroport protocols.
Anchor is a decentralized financial protocol for trading and lending, while Astroport is an automated decentralized exchange. When users do a search on google through the keywords "Protocol Anchor" or "Astroport", there are ads that seem real and realistic. But unfortunately those who are lured there will be caught in a scene of deception.
The domain name for each associated function changes once the user actually accesses their link. The following screen for each ad prompts users to connect their wallets by providing their key phrases.
With this key phrase, individuals can manipulate the crypto assets contained in the wallet. On that basis, the lesson to be learned is not to share private keys with anyone.
The SlowMist team now recommends that Terra users avoid clicking on any Google ad links. Last Sunday, MetaMask issued a warning to Apple users about phishing scams following the integration of the wallet with Apple Pay.