Scammers are getting craftier by the day, and this time they're using Telegram bots to steal your tokens—and you may just be helping them to do it.

According to blockchain security firm Scam Sniffer, these scammers are now using a sneaky combo of fake X (formerly Twitter) accounts, bogus Telegram channels, and malicious bots to infiltrate systems and make off with unsuspecting users' crypto assets.

Here's how the scam works: First, these scammers create fake X (formerly Twitter) accounts, pretending to be popular crypto influencers. Because who wouldn't trust someone with a blue checkmark and a Bored Ape PFP for profile pic?  

These impostor accounts then invite users to join "exclusive" Telegram groups, promising investment insights that'll make you rich quicker than Elon Musk himself.

Once you're in the Telegram group (feeling all special and exclusive), you're asked to verify yourself using a bot called "OfficiaISafeguardBot." Now, if that name doesn't scream "totally legit and not at all suspicious," I don't know what does. 

This bot creates a sense of urgency, giving users barely enough time to say "wait a minute" before they're supposed to complete the captcha.

But here's where things get really devious. This bot isn't just checking if you're a human - it's actually injecting malicious PowerShell code into your system. Before you know it, you've got malware running around in your computer like a kid in a candy store, and it's got its eyes on your crypto wallet.

Scam Sniffer reports that they've seen "numerous cases" where similar malware has led to the theft of private keys.

What's particularly concerning is that this scam isn't just limited to Telegram. Kaspersky researchers have uncovered a similar scheme targeting users of Toncoin (TON), Telegram's associated cryptocurrency. This scam has been active since November 2023 and is growing faster than a crypto bubble.

In this version, victims are invited to join an "exclusive earning program" by a contact in their list. It's like those pyramid schemes your aunt keeps trying to get you into. The scam involves a fake Telegram bot posing as a cryptocurrency storage solution, and victims are encouraged to buy Toncoins and then purchase so-called 'boosters.' Spoiler alert: these 'boosters' boost nothing but the scammers' wallets.

To add insult to injury, victims are then manipulated into spreading the scam to their friends and acquaintances.

Now, you might be thinking, "Surely people aren't falling for this?" Well, consider this: in the first half of 2024 alone, a whopping $679 million was lost to cryptocurrency fraud, according to the Federal Trade Commission (FTC).

Kaspersky experts advise users to exercise caution when encountering offers of quick riches, even if they come from friends or acquaintances. Remember, when it comes to crypto, if it sounds too good to be true, it probably is. 

And if a bot is asking you to verify yourself faster than the usual time it takes, then maybe take a step back and think twice.

Toncoin: From Telegram to TON Token | HODL FM
Explore Toncoin’s incredible journey from Telegram to crypto stardom, its unique features, and the versatility of the TON token.
hodl-post-imageHODL FM: The Wildest Ride in the Crypto MarketHODL Team
hodl-post-image

Disclaimer: All materials on this site are for informational purposes only. None of the material should be interpreted as investment advice. Please note that despite the nature of much of the material created and hosted on this website, HODL FM is not a financial reference resource and the opinions of authors and other contributors are their own and should not be taken as financial advice. If you require advice of this sort, HODL FM strongly recommends contacting a qualified industry professional.