Scammers targeting cryptocurrency users have turned their focus to Telegram, using malware to steal funds and sensitive information.
Scam Sniffer, a security firm, explained that this shift comes as more people recognize and avoid phishing links. Scammers rely on malware because it gives them greater access to systems, and stolen funds are harder to trace.
Unlike phishing attacks, malware can bypass many security measures and steal private keys directly from users' devices.
Did you know?
Subscribe - We publish new crypto explainer videos every week!
What is the Metaverse? (Meaning + Animated Examples)
According to Scam Sniffer in a January 16 post on X, these schemes have increased by over 2,000% since November 2024 and are replacing more traditional phishing methods.
Instead of tricking users into connecting their wallets to fake websites, scammers use fake Telegram verification bots to distribute malware.
These bots often appear in phony trading groups, airdrop promotions, or exclusive investment groups. Once users interact with these bots or install their verification tools, they unknowingly grant access to their passwords, wallet files, and browser data.
Scam Sniffer identified two fake Telegram bots, OfficiaISafeguardRobot and SafeguardsAuthenticationBot, as part of the growing trend.
In December 2024, scammers created fake accounts impersonating crypto influencers, luring them into Telegram groups with promises of investment advice. Inside the groups, they are asked to complete a verification process using a fake bot, which secretly installs malware on their devices.
On January 5, the security team also reported that scammers target community projects by sending realistic-looking invites to unsuspecting users. These tactics make it harder for users to identify the scams.
Meanwhile, a new macOS malware has recently gained attention, but a former National Security Agency researcher argued that the threat is exaggerated. What did he say about this malware? Read the full story.