Binance Co-Founder Warns of Phishing Threat
Key Summary
Changpeng Zhao issued an urgent alert regarding a fraudulent domain utilizing a altered Trust Wallet URL to siphon user funds through injected JavaScript backend scripts. According to threat intelligence shared by Bitdefender, the campaign builds on recent breach fears to trick retail holders across multiple jurisdictions.
Key Bullets
- Changpeng Zhao warned traders on social media about a fraudulent Trust Wallet phishing domain utilizing a modified web extension.
- Malicious JavaScript embedded in the fake site scans connected wallet balances via backend APIs to prepare unauthorized asset transfers.
- Security telemetry published by Bitdefender confirms the campaign targets retail holders across the United States, United Kingdom, and Australia.
- Attackers distributed phishing lures via email claiming users faced account suspension unless completing urgent verification protocols by Nov. 7.
Fake Domain Mimics Trust Wallet Interface
Binance co-founder Changpeng Zhao warned retail traders Tuesday morning about an active phishing scheme utilizing a malicious web domain that impersonates Trust Wallet. According to public alerts posted by Zhao, attackers registered a fraudulent site by replacing the letter u with an a and changing the standard top-level domain extension to . cam. Unsuspecting users visiting the replica site are prompted to connect their digital asset wallets under the guise of reviewing pending transaction histories.
Backend API Scripts Scan Wallet Balances
The fraudulent portal executes injected JavaScript routines designed to query user balances through an external backend API. On-chain telemetry reviewed by security researchers indicates the script immediately organizes unauthorized transfers targeting connected accounts. The exploit mechanism successfully interfaces with multiple prominent non-custodial tools, including Trust Wallet, Phantom, and OKX Wallet. Traders failed to spot the subtle domain discrepancy before granting signature permissions.
The malicious setup arrived directly on the heels of a coordinated email campaign tracked by Bitdefender. Threat intelligence reports filed Nov. 3 revealed that scammers exploited fallout from a prior Binance security breach to distribute fake verification demands. Phishing notices insisted that Trust Wallet users faced immediate account suspension following Nov. 7 unless they completed mandatory security checks.
Global Phishing Campaign Spreads Via Email
Bitdefender telemetry confirms the fraudulent emails struck retail accounts across the United States, United Kingdom, Australia, Ireland, and South Africa simultaneously. Victims clicking the embedded links landed on sophisticated replica domains engineered to harvest recovery seed phrases and private keys. Separate telemetry compiled earlier this year by CYFIRMA similarly flagged malicious QR code distributions targeting Trust Wallet holders through Telegram channels. Users must verify exact URL strings before authorizing any external smart contract interactions.
About CryptoNewsFree Market Intelligence Wire
The CryptoNewsFree Market Intelligence Wire provides rapid, objective coverage of breaking crypto developments, regulatory actions, and market liquidity trends. Our reporting strictly follows our Editorial & Verification Standards.