Fraudsters capture old channels on YouTube with the history of cryptocurrency publications in order to promote bots streaming of assets from spectators ‘wallets, Sentinellabs’ cybersecurity specialists said.

According to experts, criminals offer the audience a smart contract code to deploy a trading bot, which supposedly helps to earn money in cryptocurrency investments. After the deployment of the smart contract, the attacker’s wallet is secretly added to the victim system and masked to the trading address. When the victim replenishes the contract by means, the fraudster gets access to them and can steal assets.

“The scheme is widespread and is already valid for a year. We observed the use of the same wallet in several malicious smart contracts, however, many unique addresses are used, so it is not clear how many attackers are behind the scheme, ”said Sentinellbs.

Security experts drew attention to the fact that all the fraud participating in the fraud have a long history and previously published content dedicated to digital assets and investment strategies in the market. This helps to create a security illusion among victims.

Attackers actively control comments under the videos: deleting negative reviews by placing fake reviews of satisfied bots users. Similar frauds are becoming more and more common, representatives of Sentinellabs are worried.

In order to protect yourself from such schemes, crypto traders should avoid deployment of code advertised through bloggers or posts on social networks, especially if the project promises quick earnings, cybersecurity experts advised.

Earlier, the experts of the Google Cloud platform and Wiz said that hackers from North Korea strengthen attacks on the crypto industry using complex malicious programs. Over six months of a group of cybercriminals from the DPRK, a cryptocurrency was abducted by $ 1.6 billion.