Crypto Users Hit Hard by Phishing Scams in 2023: A Loss of Nearly $295 Million

Uquid
5 min readJan 12, 2024

--

2023 witnessed a staggering surge in cryptocurrency phishing scams, impacting over 324,000 users and leading to a loss of approximately $295 million. This blog post delves into the alarming rise of such scams, underscoring the urgent need for heightened security measures and awareness among crypto users.

The Rising Tide of Crypto Phishing Scams

Throughout 2023, the cryptocurrency community faced an unprecedented wave of phishing attacks. Security firm Scam Sniffer’s report revealed a sophisticated use of wallet drainer malware, resulting in nearly $300 million being siphoned from unsuspecting victims. These phishing activities showed a persistent growth trend, with attackers employing increasingly intricate methods to evade security.

Key players in these scams were the wallet drainers. Notable among them was Inferno Drainer, which alone was responsible for stealing $81 million from 134,000 users. Other prominent drainers included MS and Angel Drainer, with losses amounting to millions of dollars. Despite efforts to curb their activities, these drainers often re-emerge, replacing those that exit the market.

Notable wallet drainers active in 2023. Source: Scam Sniffer

The year 2023 saw a variety of tactics employed by scammers. The methods varied widely from hijacking official Discord and Twitter accounts to conducting fake airdrops. Phishing websites gained organic traffic by exploiting social media platforms and even bypassing advertising guidelines of significant platforms like Google and Twitter.

Despite the significant losses, 2023’s figures showed a decrease in cryptocurrency scams compared to 2022. However, these incidents have drawn more regulatory scrutiny and highlighted the critical need for improved security measures in the crypto space. Scam Sniffer and other security firms continue to monitor and report on these threats, providing vital information to help users stay vigilant.

The Impact of Phishing on Crypto Shopping and E-commerce

Phishing attacks have significantly impacted e-commerce businesses in recent years, with numerous notable incidents reported. A key trend observed in 2023 was using e-commerce platforms as a lure in many phishing attacks. This reflects the increasing focus of cyber criminals on the lucrative opportunities the e-commerce sector presents.

For instance, a report by Kaspersky found that over 30 million phishing attacks occurred in the first ten months of 2023, with e-commerce platforms being used as a lure in 43.5% of these attacks. The phishing attacks often imitated significant e-commerce platforms like Amazon, eBay, Walmart, Alibaba, Mercado Libre, and luxury brands to target potential victims. The increase in phishing attacks correlated with increased online shopping, such as Black Friday and Cyber Monday​.

One of the significant data breaches in the e-commerce sector was the incident involving Mercari, a Japanese e-commerce platform. This breach was part of the more comprehensive Codecov supply-chain attack, which affected multiple companies. In the case of Mercari, the breach exposed tens of thousands of customer records, including financial information. The compromised data included bank codes, branch codes, account numbers, names, dates of birth, and email addresses. Mercari conducted a thorough investigation and took steps to mitigate the breach, including contacting affected individuals and notifying relevant authorities​.

Illustration of the Codecov attack’s effects on Mercari. Source: Mercari

These incidents highlight the growing sophistication of cyber attacks targeting the e-commerce industry and underscore the importance of robust cybersecurity measures. Businesses in the e-commerce sector are increasingly at risk of phishing attacks, and it’s crucial to implement comprehensive security strategies to protect sensitive data and maintain customer trust.

Uquid: Pioneering Safe and Smart Shopping in Web 3.0

Uquid emerges as a pioneering platform at the forefront of integrating DeFi and Web 3.0 into e-commerce. Launched in 2016, Uquid offers a secure, transparent, and user-friendly shopping experience, effectively mitigating the risks associated with online transactions.

With a vast array of over 120 million products, including physical, digital, and NFTs, Uquid serves customers in over 150 countries, demonstrating its global reach and versatility. The platform’s commitment to customer security and satisfaction is evident in its flexible payment options, encompassing cryptocurrency, fiat, and wallet transactions.

Uquid’s standout feature, Payin3 with Crypto, offers an innovative solution to protect the future value of cryptocurrencies. This option allows customers to delay payments in three installments over 90 days, interest-free, providing a convenient and risk-free shopping experience.

By choosing Uquid, users can confidently shop, assured of a secure, transparent, and diverse shopping environment. The platform’s continuous upgrades and adherence to its Official Roadmap further reinforce its dedication to providing the best Shop to Earn experience in the Metaverse.

Recognizing the growing threat of phishing scams, Uquid has implemented cutting-edge measures to ensure a secure shopping experience for its users. Here’s an insight into the proactive steps Uquid has taken to combat these cyber threats.

Secure Payment Gateways

Understanding the importance of secure transactions, Uquid employs encrypted payment gateways. These gateways safeguard sensitive financial information, protecting customers’ banking details against phishing attempts.

Continuous System Monitoring

To stay ahead of cybercriminals, Uquid has established a round-the-clock monitoring system. This system promptly detects and responds to any unusual activity, safeguarding against potential phishing attacks.

Collaborating with Cybersecurity Experts

Uquid works closely with leading cybersecurity experts to stay updated on the latest phishing techniques. This collaboration allows Uquid to refine its security measures continuously.

Incident Response Plan

Uquid has a robust incident response plan to manage breaches effectively. This plan includes immediate measures to protect affected users and prevent further damage.

Community Engagement

Uquid actively engages with its community, encouraging users to report suspicious activities. This collaborative approach plays a vital role in identifying and mitigating phishing threats.

Get more news and information about UQUID at:

Telegram: https://t.me/uquidcoinofficial

Twitter: https://twitter.com/uquidcard

Facebook: https://facebook.com/uquidcard

Medium: https://medium.com/@uquidcoin

Blog: https://shop.uquid.com/blog

Website (Digital product): https://shop.uquid.com

Website (Physical product): https://uquid.com

Website (General): https://uquidcoin.com

Website (NFT): https://nft.uquid.com

--

--

Uquid
Uquid

Written by Uquid

Leading in Web 3.0 shopping platform with over 160M products. Shop to Earn, exclusive deals, Payin3 with Crypto. Explore more: http://linktr.ee/uquidofficial

No responses yet