用於針對加密用戶的欺騙性策略

領先的網絡安全公司卡巴斯基（Kaspersky）透露，該計劃是欺騙性的。

Kaspersky, a renowned cybersecurity firm, has shed light on a crafty scam that swindlers are employing to steal cryptocurrency, specifically USDT (Tether) and TRX (TRON).

卡巴斯基（Kaspersky）是一家著名的網絡安全公司，已經揭示了一個狡猾的騙局，Swindlers正在使用該騙局​​來竊取加密貨幣，尤其是USDT（Tether）和TRX（TRON）。

The Essence of the Scam

騙局的本質

The scam unfolds with messages that appear to be from a friend or relative, already familiar with cryptocurrency. These messages typically include a recovery phrase, further enhancing the sense of authenticity. The messages advise the recipient to use the phrase to recover their wallet, which usually contains a small amount of TRX and a larger sum of USDT.

騙局隨著似乎來自朋友或親戚的消息而展開，已經熟悉加密貨幣。這些消息通常包括一個恢復短語，進一步增強了真實性。這些消息建議接收者使用短語來恢復其錢包，通常包含少量的TRX和更大的USDT。

To create the impression of needing a minimal TRX balance for the USDT transfer, the scammers usually leave a small amount of TRX in the wallet and a larger amount of USDT. This detail is crucial for the scam to work since, in order to transfer USDT, a small TRX balance is required on the same wallet.

為了創造需要最小的TRX平衡的印象，騙子通常在錢包中留下少量的TRX和更多的USDT。該細節對於騙局工作至關重要，因為為了轉移USDT，在同一錢包上需要一個小的TRX平衡。

After the victim is convinced to send the TRX to the scammer's multi-signature wallet, which is usually secured by a 2-of-3 multi-signature system, the scammer quickly moves the TRX to another wallet under their sole control.

在受害者說服將TRX發送到騙子的多簽名錢包後，通常由3中的2中的2中的多簽名系統確保，騙子迅速將TRX移至其唯一控制下的另一個錢包。

The multi-signature wallet is a common technology used in cryptocurrency to provide an extra layer of security. In a 2-of-3 multi-signature setup, two out of three parties need to approve a transaction for it to be executed. For instance, a cryptocurrency exchange might use a 2-of-3 multi-signature system with two internal members and one external service provider to process user withdrawals. Both exchange members would need to agree to withdraw funds to the user's wallet, or one exchange member and the external service provider would need to agree.

多簽名錢包是一種用於加密貨幣的常見技術，可提供額外的安全層。在3中的2中，多簽名設置中，三分之二需要批准要執行的交易。例如，加密貨幣交易所可以使用2中的2中的多簽名系統，其中有兩個內部成員和一個外部服務提供商來處理用戶提款。兩個交換成員都需要同意將資金撤回用戶的錢包，或一個交換會員和外部服務提供商需要同意。

In this case, the scammer would create a multi-signature wallet with another person or service (e.g., a service that provides multi-signature as part of its service offering) to collect the TRX. The scammer would also notify the victim that they are transferring the USDT to the victim's wallet. However, since the scammer is one of the two required parties to approve transactions from the multi-signature wallet, they would quickly move the TRX to another wallet under their sole control after receiving it.

在這種情況下，騙子將與其他人或服務（例如，提供多簽名作為其服務產品的一部分）創建一個多簽名的錢包來收集TRX。騙子還將通知受害者他們將USDT轉移到受害者的錢包中。但是，由於騙子是批准從多簽名錢包批准交易的兩個當事方之一，因此他們將在收到其唯一控制下的另一個錢包中迅速將TRX移至另一個錢包。

This scam is likely to target less experienced crypto users who might not be fully aware of cryptocurrency operations and security best practices. While experienced users are less likely to fall for this scam, it's still possible, especially if they are not paying close attention to the details of the transaction.

該騙局可能會針對經驗豐富的加密用戶，他們可能不完全了解加密貨幣操作和安全性最佳實踐。儘管有經驗的用戶不太可能因此騙局而失敗，但仍然有可能，尤其是當他們不密切關注交易細節時。

To protect against this scam, Kaspersky offers several crucial recommendations:

為了防止這種騙局，卡巴斯基提供了幾種關鍵建議：

As Kaspersky's researchers note, this scam tactic exploits the trust of individuals and ensnares careless users. In the cryptocurrency realm, vigilance is essential as alluring promises of quick profits can lead to significant losses. Always remember, easy gains often come with hidden dangers.

正如卡巴斯基（Kaspersky）的研究人員所指出的那樣，這種騙局策略利用了個人的信任，並消除了粗心的用戶。在加密貨幣領域中，警惕至關重要，因為快速利潤的誘人承諾會導致巨大的損失。永遠記住，簡單的收益通常帶有隱藏的危險。