以太坊区块链浏览器遭受一波针对用户的网络钓鱼攻击

Etherscan 是一款流行的以太坊区块链浏览器，其广告已受到网络钓鱼活动的危害。最近引人注目的网络钓鱼攻击已导致受害者在 2023 年被盗超过 3 亿美元。Etherscan 的广告现在被用来引诱用户访问恶意网站，从而耗尽他们的加密钱包。由于广告聚合商缺乏监督，这些攻击变得更加容易，使得恶意行为者可以利用该平台。专家提醒广大用户，遇到此类骗局一定要提高警惕。

Ethereum Blockchain Explorer Plagued by Phishing Scams Targeting Users

以太坊区块链浏览器遭受针对用户的网络钓鱼诈骗

The Ethereum blockchain explorer, Etherscan, has become a breeding ground for phishing campaigns, posing a significant threat to platform users. The malicious advertisements on Etherscan are designed to deceive users and drain their crypto assets.

以太坊区块链浏览器 Etherscan 已成为网络钓鱼活动的滋生地，对平台用户构成重大威胁。 Etherscan 上的恶意广告旨在欺骗用户并耗尽他们的加密资产。

Phishing Attacks on the Rise

网络钓鱼攻击呈上升趋势

Phishing scams have become increasingly prevalent in the cryptocurrency space, with over $300 million stolen from over 324,000 victims in 2023 alone. These scams often involve fraudulent websites or email communications that mimic legitimate entities to trick users into revealing their sensitive information, such as private keys or login credentials.

网络钓鱼诈骗在加密货币领域变得越来越普遍，仅 2023 年就有超过 324,000 名受害者被盗超过 3 亿美元。这些诈骗通常涉及模仿合法实体的欺诈网站或电子邮件通信，以诱骗用户泄露其敏感信息，例如私钥或登录凭据。

Etherscan Advertisements Fueling Phishing Attacks

Etherscan 广告助长网络钓鱼攻击

On April 8, 2024, a member of the X Community, McBiblets, sounded the alarm on Twitter, exposing Etherscan advertisements that were redirecting users to malicious websites known as "wallet drainers." These websites are designed to steal all funds from users' connected crypto wallets.

2024 年 4 月 8 日，X 社区成员 McBiblets 在 Twitter 上敲响了警钟，曝光了 Etherscan 广告，这些广告将用户重定向到被称为“钱包耗尽者”的恶意网站。这些网站旨在窃取用户连接的加密钱包中的所有资金。

The malicious advertisements have also been detected on major search engines like Google, Bing, and DuckDuckGo, as well as on popular social media platforms like X. This widespread reach has significantly increased the potential for users to fall victim to these phishing scams.

Google、Bing 和 DuckDuckGo 等主要搜索引擎以及 X 等流行社交媒体平台上也检测到了恶意广告。这种广泛的影响范围大大增加了用户成为这些网络钓鱼诈骗受害者的可能性。

Experts React to the Attack

专家对攻击做出反应

Anti-scam organizations such as Scam Sniffer and SlowMist have condemned the lack of oversight by ad aggregators like Coinzilla and Persona, who have allowed malicious actors to exploit their software and target innocent users.

Scam Sniffer 和 SlowMist 等反诈骗组织谴责 Coinzilla 和 Persona 等广告聚合商缺乏监管，这些广告聚合商允许恶意行为者利用其软件并针对无辜用户。

According to Scam Sniffer, these types of scams have already stolen approximately $104 million worth of assets from over 97,000 crypto users in the first two months of 2024 alone. Ethereum holders have been particularly hard hit, losing an estimated $78 million in ERC20 tokens and ETH.

据 Scam Sniffer 称，仅在 2024 年前两个月，此类诈骗就已从超过 97,000 名加密货币用户处窃取了价值约 1.04 亿美元的资产。以太坊持有者受到的打击尤其严重，损失了估计 7800 万美元的 ERC20 代币和 ETH。

SlowMist has also issued a warning to crypto users, urging them to exercise extreme caution when encountering suspicious websites or advertisements.

慢雾还向加密货币用户发出警告，敦促他们在遇到可疑网站或广告时要格外小心。

Suspected Phishing Attack Leader

疑似网络钓鱼攻击头目

While the identities of the scammers behind the Etherscan phishing attacks remain unknown, suspicion has fallen upon an obscure cyber phishing company known as Angel Drainer. However, no definitive evidence has yet emerged to confirm their involvement.

虽然 Etherscan 网络钓鱼攻击背后的诈骗者的身份仍然未知，但怀疑已落在一家名为 Angel Drainer 的名不见经传的网络钓鱼公司身上。然而，尚未出现明确的证据证实他们参与其中。

Expert Analysis

专家分析

Steve Anderson, an Australian crypto expert and trading specialist with over five years of experience, has provided his insights into the situation. Anderson believes that the lack of regulation in the cryptocurrency industry has allowed malicious actors to operate with impunity.

拥有五年以上经验的澳大利亚加密货币专家和交易专家史蒂夫·安德森（Steve Anderson）提供了他对这一情况的见解。安德森认为，加密货币行业缺乏监管，导致恶意行为者可以逍遥法外。

"The cryptocurrency space is in desperate need of stronger regulations to protect users from these types of scams," Anderson said. "Until such regulations are in place, users must remain vigilant and take steps to protect their assets."

安德森说：“加密货币领域迫切需要更强有力的监管，以保护用户免受此类诈骗。” “在此类法规到位之前，用户必须保持警惕并采取措施保护自己的资产。”

Recommendations for Users

给用户的建议

To protect themselves from phishing scams, Etherscan users are advised to:

为了保护自己免受网络钓鱼诈骗，建议 Etherscan 用户：

• Exercise caution when clicking on advertisements or links, especially those offering unsolicited rewards or promotions.
• Always verify the authenticity of websites and URLs before entering sensitive information.
• Use two-factor authentication (2FA) to add an extra layer of security to their accounts.
• Report any suspicious or malicious advertisements to Etherscan or the appropriate authorities.

By following these guidelines and staying informed about the latest phishing scams, Etherscan users can help mitigate the risks and protect their cryptocurrency assets.

点击广告或链接时请务必小心，尤其是那些提供未经请求的奖励或促销的广告或链接。在输入敏感信息之前，请务必验证网站和 URL 的真实性。使用双因素身份验证 (2FA) 为其帐户添加额外的安全层。举报向 Etherscan 或有关当局发送任何可疑或恶意广告。通过遵循这些准则并随时了解最新的网络钓鱼诈骗，Etherscan 用户可以帮助降低风险并保护其加密货币资产。