🚨New NFT Phishing Method🚨
I've seen a new NFT phishing method pop up across scam reporting channels. At least 200+ ETH has been stolen in assets within the past 48 hours.
👇Let's look at how it works
Fantasy
661 posts
Fantasy
@0xFantasy
- The following analysis of wallets associated with H*mas and the PIJ, named in Israeli Administrative Seizure Orders (ASOs), referenced by Elliptic, Chainalysis, and in Sen. Elizabeth Warren’s letter to the US Treasury, will contain minimal on-chain analysis for the following
Can crypto-twitter OSINT outperform the WSJ’s chain analysis? ** Announcing $500 in BTC bounty for the 21 best open source analyses of the facts surrounding the WSJ/Warren letter. Rules and submission link below ** On October 10, following the attacks by Hamas on Israeli - Replying to @0xFantasy6/ How to stay safe: - CLOSE YOUR DMS - Always verify links and Discords - Don't sign random messages/tx - If you didn't do something, you didn't do it - See something, say something
- Monkey Drainer has been shut down according to its owner. I wonder why 🤔
- Replying to @0xFantasy3.2/ If someone asks you to join a server and sends you an invite, always retype it out and join it by using the "Join a Server" menu. If the invite doesn't exist, or they're trying to trick you, Discord will tell you the invite is invalid or join you to the proper server
- Replying to @0xFantasy1/ The setup starts by you being contacted via DMs (CLOSE YOUR DMS) regarding a report/screenshots of YOU being racist, attempting to scam someone, or something along those lines. These screenshots look extremely real as they are created on Discord using inspect element.
- Replying to @0xFantasy5/ All of the sites I've seen are currently using Monkey Drainer's phishing kit. If you sign any message or transaction coming from these sites you WILL lose assets. The drainer will use various methods such as Seaport signatures, SAFA, and more.
- Replying to @0xFantasy2/ From here, the person who contacted you (who will be pretending to be a mod from another project, currently @goblintown) will then create a group chat with the "victim" who will act extremely angry and distraught to give legitimacy to the scam.
- Replying to @0xFantasy3.1/ There currently exists an exploit on Discord that allows people to "mask" where an invite leads to. For example in my image below, the invite link and the embed that shows up below it aren't the same. At this point, you can't even trust invite embeds.
- Replying to @0xFantasy4/ Now, this is where the scam actually starts: to gain access to the appeals server (ugh, here we go), you will have to "verify." This verification will take you to an external site (🚩) and ask you to VERIFY YOUR WALLET (🚩🚩🚩).
- Replying to @0xFantasy3/ They will ask you some questions and eventually ask you to "rejoin" their server due to you being kicked/leaving. When you click on this invite, it will turn out you are banned! From here, they will ask you to join their "appeals" server to rectify this situation.
- Quick analysis of the @AzukiOfficial incident. Roughly $758,000 was stolen... the majority of which was from a single person who lost 751K $USDC
- Replying to @zachxbtcoinbase has been the only company i've attempted to work with and felt completely defeated i started giving high quality intel to a T&S manager in Sept 2023, and over the following year there was zero meaningful action taken. whether directly against the scammers, their
- Happy to announce that I've joined @fairside as their lead investigator! I'll be building out the investigations department to prevent fraud and provide accessible and equitable crypto insurance for all 🫡
