Forest Global Training Partners

Cyber Risks · Krebs on Security

Double-Your-Crypto Scams Share Crypto Scam Host

Summary: A security researcher shared with KrebsOnSecurity an email from a victim who sent 1 BTC (about $42,800) to ark-x2[.]org, a site impersonating ARKinvest CEO Cathie Wood that promised to double crypto investments, after watching a YouTube video presented as a live event featuring Elon Musk, Wood and Jack Dorsey. The IP address historically tied to that domain, 186.2.171.79, also hosts or parks hundreds of other newly registered crypto scam domains, and DNS records for one of them, coinbase-x2[.]net, point to a host called Cryptohost[.]to that advertised itself on the Russian-language BHF forum as a bulletproof hosting provider that does not keep customer logs.

What's compelling: The FTC counted nearly 7,000 people losing more than $80 million to crypto scams from October 2020 through March 2021, up from 570 complaints totaling $7.5 million the year before, and Chainalysis put 2021 scam losses at roughly $14 billion. A single bulletproof host sitting behind a DDoS-Guard front and a Moscow provider keeps hundreds of these domains reachable while abuse complaints go unanswered.

Read the original at Krebs on Security ↗

Topics
Fraud & Scams
Related