{"id":99,"date":"2023-02-13T00:17:27","date_gmt":"2023-02-13T05:17:27","guid":{"rendered":"https:\/\/freshphish.info\/?p=99"},"modified":"2023-02-13T00:17:28","modified_gmt":"2023-02-13T05:17:28","slug":"bitcoin-phish","status":"publish","type":"post","link":"https:\/\/freshphish.info\/?p=99","title":{"rendered":"Bitcoin Phish"},"content":{"rendered":"\n

Here’s a type of phish I haven’t seen before. It intends to make the victim believe they opened some sort of a Bitcoin mining account a year ago that has since accumulated several thousand dollars, and uses that as bait to get information from the victim.<\/p>\n\n\n\n

Here’s the email:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

The link as shown is rewritten by Proofpoint to go to their URL Defense URL so they can keep victims from getting to the phishing site once Proofpoint discovers the fraudulent email. Clicking on an unprotected link gets you to this page:<\/p>\n\n\n\n

\"\"
The page shows what looks to be a large number of small transactions that have built up to the range of $30,000.<\/figcaption><\/figure>\n\n\n\n
\"\"
It also has a scrolling box of text, appearing to be other users chatting about how surprised they are about the money coming to them.<\/figcaption><\/figure>\n\n\n\n
\"\"
The victim can type a message in but in the time I watched, I never got a response.<\/figcaption><\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"
Clicking on the link for support brings up a chat window.<\/figcaption><\/figure>\n\n\n\n
\"\"
The window is grayed out while support searches for your account.<\/figcaption><\/figure>\n\n\n\n
\"\"
They eventually find your account and you’re provided a button to fill out the form to receive your funds.<\/figcaption><\/figure>\n\n\n\n
\"\"
Clicking the button brings you to a page asking for your credit card or Bitcoin wallet number.<\/figcaption><\/figure>\n\n\n\n

I didn’t go any further than this but I would imagine providing a credit card will result in your card being used fraudulently and likely sold on the dark web. Providing your Bitcoin wallet will likely lead to a prompt for your passphrase.<\/p>\n\n\n\n

I would hope that anyone that has a Bitcoin wallet would know enough about this to not fall for this trick but someone that doesn’t have one might not know any better and provide a credit card to receive the funds.<\/p>\n\n\n\n

–Matt<\/p>\n","protected":false},"excerpt":{"rendered":"

Here’s a type of phish I haven’t seen before. It intends to make the victim believe they opened some sort<\/p>\n

Continue readingBitcoin Phish<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[12],"tags":[36],"class_list":["post-99","post","type-post","status-publish","format-standard","hentry","category-phish","tag-bitcoin"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/posts\/99","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/freshphish.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=99"}],"version-history":[{"count":1,"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/posts\/99\/revisions"}],"predecessor-version":[{"id":112,"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/posts\/99\/revisions\/112"}],"wp:attachment":[{"href":"https:\/\/freshphish.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=99"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/freshphish.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=99"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/freshphish.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=99"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}