نقصانات سے بچنے کے لیے Web3 سیکیورٹی کے ابتدائی رہنما: جعلی مائننگ پول گھوٹالے

Original author: SlowMist Security Team

پس منظر

پچھلے میں issue of Web3 Security Tips , we analyzed some typical airdrop scams and explained the various risks that users may face when claiming airdrops. Recently, the SlowMist AML team noticed a significant increase in the number of users who were harmed by fake mining pool scams when analyzing the MistTrack stolen forms submitted by victims. Therefore, in this issue, we will deeply analyze several common fake mining pool scams and put forward corresponding security suggestions to help users avoid scams.

You want his rest, he wants your life

Fake mining pool scams mainly target new Web3 users. Scammers take advantage of new users lack of understanding of the cryptocurrency market and their desire for high returns, and trick them into investing money through a series of carefully designed steps. These scams usually rely on the mechanism that funds need to be kept in the pool for a period of time to generate returns, making it difficult for users to detect that they have been deceived in a short period of time. Under the guidance of the scammers, users often continue to invest more funds in pursuit of higher interest rates. When users are unable to continue to provide funds, the scammers will threaten that this will result in the inability to redeem the principal, and ultimately users will continue to suffer losses under heavy pressure.

According to the descriptions of many victims, scammers set up fraud groups on Telegram pretending to be well-known exchanges. The members of such fraud groups can easily reach thousands or even tens of thousands, which can easily make people relax their vigilance. Many users will use the number of group members as one of the factors to distinguish the authenticity of accounts when searching for official accounts on Telegram. It is true that the number of people in the official group will be larger, but this logic may not be correct when it is reversed. It is hard to imagine that scammers set up a group with tens of thousands of people just to deceive a few sheep, and even the chat in it is bait. It is worth noting that a group with more than 50,000 people has less than 100 people online. Referring to the number of online people in other groups with tens of thousands of people, users may realize that something is wrong.

For novice users, the scammers also provided detailed operation tutorials to teach users how to check the staking status of the mining pool, how to download the wallet, and how to transfer funds to the scammers contract address. Using the illusion of the liquidity mining economic incentive mechanism, the scammers successfully attracted users to invest funds. After the user transferred funds to the contract address and received rebates, he wanted to invest more funds to obtain more benefits. This move fell into the trap of the scammers, and in the end, all the funds invested by the users were taken away by the scammers.

What鈥檚 even more disgusting is that some scammers even return counterfeit coins when giving rebates to users. New users who don鈥檛 know the truth think they have really received the rebates, until they try to trade the rebated coins and find out that they are counterfeit coins and have no value.

The scam in the picture below is to steal user funds by inducing users to perform malicious authorization. The scammers pretended to be officials and claimed that there was a super node mining activity and invited users to participate in mining. After the user clicked on the phishing link according to the operating instructions, he was induced to perform malicious authorization, which eventually led to the theft of funds.

Another scam is that the scammers first guide users to the fraudulent platform, and then manipulate the platform data to create the illusion that users are profitable. However, these profits only exist on the platform display and do not represent the actual increase in assets. At this stage, users have been deceived by the scammers superb investment ability. Next, the scammers further invite users to participate in mining pool activities and stipulate that users need to recharge 5% or 8% of the total assets in USDT to the recharge account every day to activate the mining pool. In order to obtain dividends, and under the pressure of if you dont continue to recharge, you cant redeem the principal, users continue to recharge the account provided by the scammers. Seeing this, everyone understands that this gameplay means that users have to recharge more USDT every day than the day before.

Looking at the above fake mining pool scams, I believe readers should have noticed that this type of scam does not actually use very advanced technology, but these novel gameplays and seemingly regular operating procedures are extremely confusing for new Web3 users, and inexperienced new users can easily fall into the trap.

خلاصہ کریں۔

In this issue, we analyze several common fake mining pool scams, hoping to help users be more vigilant and avoid being scammed when encountering similar situations. We also provide some safety suggestions to help users enhance their prevention capabilities:

• غیر حقیقی منافع کے وعدوں سے ہوشیار رہیں: اگر سرمایہ کاری کا موقع ایسے منافع کا وعدہ کرتا ہے جو کہ سچ ہونے کے لیے بہت اچھے ہیں، تو یہ اکثر ایک دھوکہ ہوتا ہے۔

• اتفاقی طور پر اجازت نہ دیں: نامعلوم لنکس پر کلک کرنے اور اجازت کی کارروائیوں کو انجام دینے سے گریز کریں۔

• شک میں پڑیں: گروپ کی صداقت کی احتیاط سے تصدیق کریں، اور اس کی ساکھ کا فیصلہ صرف گروپ میں موجود افراد کی تعداد کی بنیاد پر نہ کریں۔ فنڈز کی منتقلی سے متعلق کارروائیوں پر شک کریں، اور متعدد ذرائع سے سرگرمیوں کی صداقت کی تصدیق کریں۔

This article is sourced from the internet: Web3 Security Beginners Guide to Avoiding Pitfalls: Fake Mining Pool Scams

Related: The new era of value storage: gold is out, Bitcoin is in

Original author: Biteye core contributor Viee Original editor: Biteye core contributor Crush Never sell your Bitcoin, Trump said at the Bitcoin 2024 conference in Nashville this weekend, providing the strongest emotional value in the cryptocurrency world in recent times. During Trumps speech, Bitcoin staged a V-shaped trend, first falling in the short term and falling below $67,000; at the end of the speech, when he announced that Bitcoin would be listed as a strategic reserve asset, Bitcoin rose sharply, recovering all the losses and even breaking through $69,000. During his previous presidency, Trump had harshly criticized cryptocurrencies, calling them scams. Now, at the Bitcoin Conference, he even bluntly stated that Bitcoin has become the ninth largest asset in the world by market value, and will soon surpass silver and gold…