Cryptocurrency is going through a turbulent time. With many rates unstable, crypto scammers have turned to new ways to hook their victims. 

 

Kaspersky experts have witnessed one such unusual scheme, in which attackers promote fake crypto services on YouTube. They are trying to reach those interested in cheap cryptocurrency by leaving comments on popular videos – but of course, the currency won’t be received.

 

The scammers choose trending videos on YouTube and leave comments promoting a fake “breach” in the crypto market. To make their message more visible, they falsify statistics in comments, and place bot replies to amplify the initial comment. 

 

Bots replying on the scam comment

The comment encourages viewers to visit the author’s own YouTube channel and watch a video that provides instructions on how to benefit from a supposed exchange rate bug. Users may not notice that this video is the only one published on the channel.

 

The video is definitely fabricated: the edits in the exchange rate rows are visible to the naked eye, and the comments are packed with overjoyed feedback. The link under the video leads to fraudulent exchanger.

 

The fraudulent video and the comments section

Once a user arrives on the webpage linked in the description, the victim sees a facility to exchange bitcoin – but if they use it, they will never see this money again, as the service is fake.

 

“Cryptocurrency is coping with difficult times because of a constant drop in exchange rates. Those who want to buy currency at the best price are frequently being targeted by fraudsters. Our recent investigation shows that today attackers resort to new, and more mainstream ways to reach their victims – even considering their YouTube preferences. We strongly recommend users check carefully the crypto resources they turn to and do not rely on random comments on YouTube,” comments Mikhail Sytnik, a security expert at Kaspersky.

 

To avoid scams, save money and keep personal data private, Kaspersky experts share the following simple tips:

•Check any link before clicking. Hover over it to preview the URL and look for misspellings or other irregularities. It’s also good practice to only enter a username and password over a secure connection. Look for the HTTPS prefix before the site URL, indicating the connection to the site is secure 

•Sometimes fake emails and websites look just like real ones. It depends on how well the criminals did their homework. In particular, the hyperlinks will, most likely, be incorrect — with spelling mistakes. However, the links can also be disguised to look like valid links and redirect you to a different page, impersonating the legitimate site. 

•To protect one’s data and finances, it is good practice to make sure the online checkout and payment page is secure. You’ll know it is if the web page’s URL begins with HTTPS instead of the usual HTTP; an icon of a lock will also typically appear beside the URL and the address bar in some browsers will be green. If you don’t see these features, do not proceed 

•Use a trusted security solution that can help one check the security of the URL that you’re visiting and also provides the ability to open any site in a protected container to prevent theft of sensitive data, including financial details.-- TradeArabia News Service