用于针对加密用户的欺骗性策略

领先的网络安全公司卡巴斯基（Kaspersky）透露，该计划是欺骗性的。

Kaspersky, a renowned cybersecurity firm, has shed light on a crafty scam that swindlers are employing to steal cryptocurrency, specifically USDT (Tether) and TRX (TRON).

卡巴斯基（Kaspersky）是一家著名的网络安全公司，已经揭示了一个狡猾的骗局，Swindlers正在使用该骗局​​来窃取加密货币，尤其是USDT（Tether）和TRX（TRON）。

The Essence of the Scam

骗局的本质

The scam unfolds with messages that appear to be from a friend or relative, already familiar with cryptocurrency. These messages typically include a recovery phrase, further enhancing the sense of authenticity. The messages advise the recipient to use the phrase to recover their wallet, which usually contains a small amount of TRX and a larger sum of USDT.

骗局随着似乎来自朋友或亲戚的消息而展开，已经熟悉加密货币。这些消息通常包括一个恢复短语，进一步增强了真实性。这些消息建议接收者使用短语来恢复其钱包，通常包含少量的TRX和更大的USDT。

To create the impression of needing a minimal TRX balance for the USDT transfer, the scammers usually leave a small amount of TRX in the wallet and a larger amount of USDT. This detail is crucial for the scam to work since, in order to transfer USDT, a small TRX balance is required on the same wallet.

为了创造需要最小的TRX平衡的印象，骗子通常在钱包中留下少量的TRX和更多的USDT。该细节对于骗局工作至关重要，因为为了转移USDT，在同一钱包上需要一个小的TRX平衡。

After the victim is convinced to send the TRX to the scammer's multi-signature wallet, which is usually secured by a 2-of-3 multi-signature system, the scammer quickly moves the TRX to another wallet under their sole control.

在受害者说服将TRX发送到骗子的多签名钱包后，通常由3中的2中的2中的多签名系统确保，骗子迅速将TRX移至其唯一控制下的另一个钱包。

The multi-signature wallet is a common technology used in cryptocurrency to provide an extra layer of security. In a 2-of-3 multi-signature setup, two out of three parties need to approve a transaction for it to be executed. For instance, a cryptocurrency exchange might use a 2-of-3 multi-signature system with two internal members and one external service provider to process user withdrawals. Both exchange members would need to agree to withdraw funds to the user's wallet, or one exchange member and the external service provider would need to agree.

多签名钱包是一种用于加密货币的常见技术，可提供额外的安全层。在3中的2中，多签名设置中，三分之二需要批准要执行的交易。例如，加密货币交易所可以使用2中的2中的多签名系统，其中有两个内部成员和一个外部服务提供商来处理用户提款。两个交换成员都需要同意将资金撤回用户的钱包，或一个交换会员和外部服务提供商需要同意。

In this case, the scammer would create a multi-signature wallet with another person or service (e.g., a service that provides multi-signature as part of its service offering) to collect the TRX. The scammer would also notify the victim that they are transferring the USDT to the victim's wallet. However, since the scammer is one of the two required parties to approve transactions from the multi-signature wallet, they would quickly move the TRX to another wallet under their sole control after receiving it.

在这种情况下，骗子将与其他人或服务（例如，提供多签名作为其服务产品的一部分）创建一个多签名的钱包来收集TRX。骗子还将通知受害者他们将USDT转移到受害者的钱包中。但是，由于骗子是批准从多签名钱包批准交易的两个当事方之一，因此他们将在收到其唯一控制下的另一个钱包中迅速将TRX移至另一个钱包。

This scam is likely to target less experienced crypto users who might not be fully aware of cryptocurrency operations and security best practices. While experienced users are less likely to fall for this scam, it's still possible, especially if they are not paying close attention to the details of the transaction.

该骗局可能会针对经验丰富的加密用户，他们可能不完全了解加密货币操作和安全性最佳实践。尽管有经验的用户不太可能因此骗局而失败，但仍然有可能，尤其是当他们不密切关注交易细节时。

To protect against this scam, Kaspersky offers several crucial recommendations:

为了防止这种骗局，卡巴斯基提供了几种关键建议：

As Kaspersky's researchers note, this scam tactic exploits the trust of individuals and ensnares careless users. In the cryptocurrency realm, vigilance is essential as alluring promises of quick profits can lead to significant losses. Always remember, easy gains often come with hidden dangers.

正如卡巴斯基（Kaspersky）的研究人员所指出的那样，这种骗局策略利用了个人的信任，并消除了粗心的用户。在加密货币领域中，警惕至关重要，因为快速利润的诱人承诺会导致巨大的损失。永远记住，简单的收益通常带有隐藏的危险。