Archived tweet

Tweet thread by Scam Sniffer:

1/ Alert: A 'Wallet Drainer' has been linked to phishing campaigns on Google search and X ads, draining approximately $58M from over 63K victims in 9 months. Tweeted at 6:35 AM · Dec 21, 2023 2/ We first detected them in March, and the @SlowMist_Team shared their trails with us in early April. Then at the end of April, we spotted them again in Google search ad phishing. Tweeted at Dec 21 3/ In late June, @zachxbt shared "Ordinals Bubbles" a cluster of X phishing ads with us, and they are all linked to the same wallet drainer. Tweeted at Dec 21 4/ A recent test of X's ad in the feed showed that 9 were phishing ads, with over 60% using this wallet drainer. Tweeted at Dec 21 5/ Malicious ads used regional targeting and page-switching tactics to bypass ad audits, complicating the review process. Tweeted at Dec 21 6/ Phishing ads employ redirect tricks to seem legit, like disguising links as official domains that actually lead to phishing sites. Tweeted at Dec 21 7/ Over 9 months, we've tracked 10,072 sites linked to this wallet drainer, with activity peaking in May, June, and November. Tweeted at Dec 21 8/ Analysis shows this wallet drainer stole about $58.98 million from 63,210 victims in 9 months through associated addresses. Tweeted at Dec 21 9/ The wallet drainer's source code and add-ons are sold on a forum, unlike other services that take a 20% fee. Extra features, like malicious Blur signatures, cost more. Tweeted at Dec 21 10/ Advertising has turned into a key tool for scammers to target victims cost-effectively through Google search and X's user base. With tactics like domain spoofing and ad review evasion, the threat persists. Tweeted at Dec 21 It's critical for ad platforms to strengthen checks and for users to approach ads with caution, verifying authenticity to avoid phishing traps. Stay vigilant! Tweeted at Dec 21 Read more: Tweeted at Dec 21

Tweet #1

Image #1:

Image

Image #2:

Image

Image #3:

Image

Tweet #2

Image #1:

Image

Tweet #12

Links:

Tweet #3

Image #1:

Image

Tweet #4

Image #1:

Image

Tweet #5

Image #1:

Image

Image #2:

Image

Tweet #6

Image #1:

Image

Tweet #7

Image #1:

Image

Tweet #8

Links:

Tweet #9

Image #1:

Image