Originally published on: September 16, 2024
In a concerning turn of events, privacy-focused search engine DuckDuckGo has been inadvertently ranking phishing websites targeting the popular Ethereum block explorer, Etherscan. This troublesome error has raised alarm bells among cryptocurrency investors, as it puts their financial assets at risk.
On September 11, the Web3 anti-scam company, Scam Sniffer, issued a warning to DuckDuckGo users about an ongoing phishing scheme aimed at Ether investors. The issue lies in the search results that showcase fake Etherscan websites, luring unsuspecting users into connecting their MetaMask wallets.
Once a user falls victim to these phishing sites and grants permission for the connection, hackers can effortlessly access their wallet and make unauthorized withdrawals. This poses a significant threat and has already led to a loss of over $520,000 for one unfortunate user on September 10.
According to the Scam Sniffer report, there have been over 9,100 victims of crypto phishing scams in August alone, resulting in a staggering $63 million in losses. One distressing case involved a victim losing $55 million in Dai to a phishing attack. While the number of victims seems to have decreased compared to the previous year, the amount stolen has seen a drastic 215% increase.
It’s not just DuckDuckGo that is affected by these scams. Attackers are also trying to manipulate rankings on other search engines like Google and Bing, as well as using sponsored banner ads to lure in unsuspecting victims. To protect yourself from falling prey to such scams, it’s essential to stay informed and vigilant.
If you want to learn more about phishing attacks and how to prevent them, check out Cointelegraph’s informative guide. In the meantime, it’s crucial to exercise caution and be wary of any suspicious links or requests for wallet connections online.
In a separate incident in July, blockchain security firm SlowMist issued a warning about a large-scale phishing attack targeting the Telegram-linked blockchain platform, The Open Network (TON). According to SlowMist founder Yu Xian, the risks of phishing attacks are higher for users with anonymous numbers on Telegram, as they are not tied to SIM cards.
As the crypto world continues to attract malicious actors, it’s more important than ever to stay informed and take proactive measures to protect your assets. Stay safe and safeguard your investments from falling into the wrong hands.