Hackers continue to infiltrate the crypto sector to steal digital assets. Hackers are now using SEO techniques to direct users to phishing websites of wallet providers such as Metamask and cryptocurrency exchanges such as Coinbase and Kraken.

Hackers are inventing new ways to steal cryptocurrency

The Netskope report showed that cryptocurrency phishing campaigns are now being conducted through several platforms such as Google Sites, Microsoft Azure, and SEO. Phishing campaigns have been the cause of huge losses for crypto investors over the years.

The sites targeted by these schemes are created using Microsoft Azure and Google Sites. Users on these platforms are tricked into providing their data, allowing attackers to steal funds from them.

This is the first type of crypto-fraud that Netskope has been able to track down. Netskope is an online security company that provides SEO-related services. The company’s 2022 report also stated that hackers used blog posts as tools to send out links.

Hackers placed links containing SEO content in blog posts, which allowed them to rank higher in search results. This shows that the links will be accessible to many people who will open them, assuming they are linked to real cryptocurrency websites. Instead, these links direct users to phishing websites that look like legitimate cryptocurrency websites such as MetaMask. Some hackers mimic leading exchanges such as Coinbase, Gemini and Kraken.

Phishing campaigns

Phishing campaigns have become very common in the crypto sector. Phishing sites are usually hosted on platforms such as Microsoft Azure and Google Sites. They are designed to trick users and steal their personal information.

This information is used for several purposes, such as obtaining the private seed phrases of users’ wallets by giving them access to the data. This is the method used by the phishing site on Metamask.

Hackers also obtain account details of exchanges participating in the campaign. When users provide their information, the sites are prompted to contact customer service, after which the hackers get more information about the users and how they can get their funds.

Netskope also said that users are advised not to provide their account credentials after clicking on the link. Instead, users are encouraged to go directly to the site they want to access. Institutions should also use a secure web gateway to detect and block phishing in real-time.

The address of the site the user goes to and leaves their information should be checked very carefully. You should not click on links received from suspicious addresses, nor should you enter your credentials, much less the secret phrase from a cryptocurrency wallet.

https://altcoin.ng/hackers-use-google-sites-and-microsoft-azure-to-launch-crypto-phishing-campaigns/