Fake Uniswap Website Drains Crypto Wallets as Scammers Pocket $400K

Uniswap accounted for 41% of tracked malicious web sites linked to crypto phishing campaigns uncovered by SEAL researchers in March.

A faux web site impersonating Uniswap is draining funds from a number of crypto wallets. The distinguished on-chain analyst, pseudonymously often called “b-block,” warned that the scammers presently management a minimum of $400,000 in stolen belongings.

Customers have been urged to rely solely on official hyperlinks and confirm protocols by DefiLlama.

Uniswap Tops Record of Most-Focused Platforms

The newest replace comes a month after safety group SEAL reported a significant rise in malicious Google Advertisements focusing on crypto customers. It discovered that attackers have been impersonating fashionable DeFi platforms, wallets, and buying and selling functions to steal funds.

SEAL said it lately blocked over 356 malicious Google advert URLs tied to crypto scams, which focused platforms equivalent to Uniswap, Morpho Finance, PancakeSwap, Hyperliquid, CoW Swap, and 1inch customers

Based on the report, attackers used hacked or fraudulently obtained Google advertiser accounts and relied on cloaking, fingerprinting, and nested iframe supply programs to bypass Google’s automated evaluate checks. Most of the faux adverts used trusted Google companies equivalent to websites.google.com and docs.google.com to seem respectable in search outcomes.

SEAL recognized crypto drainer households, together with Inferno Drainer and Vanilla Drainer, as essentially the most generally used malware within the campaigns. The report mentioned these instruments trick customers into signing malicious pockets transactions or coming into restoration seed phrases on cloned web sites, permitting attackers to take management of pockets belongings.

SEAL additionally added that the superior infrastructure used within the assaults, together with Cloudflare Staff, Arweave-hosted payloads, site visitors redirection programs, and proxy layers, can intercept Ethereum RPC requests and monitor consumer exercise in actual time.

You may additionally like:

Uniswap was essentially the most impersonated platform, accounting for 41% of tracked malicious websites. Between March 13 and March 30, confirmed and unattributed losses linked to the campaigns exceeded $1.27 million, though the safety group mentioned the precise determine was probably considerably larger.

Rampant Phishing Campaigns

Whereas the latest Uniswap-related scams primarily concerned faux web sites and malicious Google Advertisements, a separate phishing marketing campaign earlier this 12 months focused Ledger customers by fraudulent emails. The assault adopted a knowledge breach at Ledger’s third-party e-commerce accomplice, International-e, which uncovered buyer contact and order info.

The scammers claimed in emails that Ledger and Trezor had merged and urged customers emigrate their wallets through faux web sites that requested 24-word restoration phrases. The phishing pages carefully copied the businesses’ official branding and messaging types.

Extra lately, Ripple CTO David Schwartz warned of a phishing marketing campaign that despatched faux safety alerts that appeared to return from Robinhood’s official e-mail system. The emails handed authentication checks as a result of attackers exploited Robinhood’s account creation circulation, which made the messages seem respectable.

The phishing notice claimed a brand new login from an “iPhone 17 Professional” and prompted customers to evaluate suspicious exercise by a “Assessment Exercise Now” button, which then directed them towards credential theft. Robinhood later confirmed the difficulty, however acknowledged that no programs have been breached and no funds have been affected.