10 votes

Bitcoin Phishing Attack

Posted by OriginalBinChicken
Tags: security, phishing, bitcoin

Got this phishing SMSmessage today. I spun up a VM and investigated the domain provided in the message. Found the provider and reported it to them.

The phishing page is a replica Coinbase login page.

https://imgur.com/a/ZSzNKO7

3 comments

  1. [2]
    murphyj
    Link
    Good catch. I deal with phishing quite a lot. Personally I find urlscan.io much easier than a vm, unless you're doing more dynamic analysis. I find in terms of disabling the site, I will often:...

    Good catch.

    I deal with phishing quite a lot.
    Personally I find urlscan.io much easier than a vm, unless you're doing more dynamic analysis.

    I find in terms of disabling the site, I will often:

    2 votes
    1. OriginalBinChicken
      Link Parent
      +1 for the scanner site. Will be using that in the future. I already reported them and got confirmation that they've been taken down! Good guys win another! :D

      +1 for the scanner site. Will be using that in the future.

      I already reported them and got confirmation that they've been taken down!

      Good guys win another! :D

      2 votes
  2. radon
    Link
    looks like the url already gives it away. or should

    looks like the url already gives it away. or should

    1 vote