Social engineering scams, from the Meeten campaign to fake crypto support scams, have become a troubling occurrence in crypto.
Threat actors are using an elaborate social engineering scheme to target crypto users and drain their wallets, according to a Thursday report from cybersecurity company Darktrace. The company wrote that the techniques are similar to those used by “Traffer Groups,” which use malware to steal credentials and data.
The social engineering scheme involves gaining the trust of users by posing as representatives from fake startup companies in the industries of AI, gaming, Web3 and social media. Compromised X accounts are often involved, and the threat actors supplement the fraud with Medium articles and GitHub entries.
“Each campaign typically starts with a victim being contacted through X messages, Telegram or Discord,” the report reads. “A fake employee of the company will contact a victim asking to test out their software in exchange for a cryptocurrency payment.”
