Telegram Malware Scams Surge 2,000%, Overtaking Phishing Attacks

by

As per Scam Sniffer’s concerning data, Telegram-focused scams have overtaken traditional phishing schemes in terms of frequency. Over the period from November 2024 to January 2025, cases involving malicious Telegram groups increased by more than 2000%, while the occurrence of standard phishing attacks remained consistent.

Instead of common “wallet connection” scams, these latest strategies employ more advanced techniques like fake verification bots, deceptive trading groups, sham airdrop groups, and “exclusive” alpha groups masquerading as genuine entities.

From Bots to Bogus Groups

According to the latest announcement from Scam Sniffer, when users engage with harmful entities, either by running malicious code or downloading misleading “verification” software, hackers can seize a broad range of sensitive data. This encompasses login credentials (like passwords), digital wallet information, clipboard history, and browsing details.

As a researcher studying digital fraud, I’ve observed an intriguing tactical adjustment in the world of online scams – a growing preference for Telegram platforms. Given the heightened user vigilance against conventional signature scams, cybercriminals are adapting their strategies by distributing malware. This malicious software grants them expanded access to victims’ sensitive data, making it more challenging to trace financial losses due to its complexity and dispersed nature.

To safeguard against these continually changing dangers, the blockchain security company suggested users to practice utmost vigilance. Essential tips include not running unrecognized commands, abstaining from installing software that hasn’t been verified, steering clear of verification methods based on clipboards, and maintaining a healthy dose of suspicion towards immediate group invitations. Additionally, employing hardware wallets may provide an extra protective barrier.

Cybercriminals Shift Tactics

Previously, Scam Sniffer flagged an increase in cryptocurrency scams. In these schemes, con artists pose as well-known influencers on phony X accounts, tricking victims into joining deceptive Telegram communities. These communities employ a malicious bot named OfficiaISafeguardBot to simulate a verification process, secretly inserting harmful PowerShell code onto users’ clipboards. When this code is activated, it breaches sensitive information such as crypto wallets, potentially causing significant harm.

Lately, Scam Sniffer has noticed that fraudsters have been sending misleading Telegram invites to genuine project communities. Instead of asking for wallet connections or signatures, these scams encourage users to execute harmless-looking code for real-time updates. Besides OfficiaISafeguardRobot, other fake bots worth mentioning are SafeguardsAuthenticationBot, which take advantage of minor spelling mistakes.

This advancement in strategies showcased a move towards more complex user manipulation techniques, avoiding the use of fraudulent email links to get users to run harmful software instead.

Read More

2025-01-17 07:32