Do not fall in the trap of Bitcoin gifts scams on the theme of Black Friday

It seems that hackers managed to take control of the email address of the Uphold cryptocurrency exchange – and send their users a link to a Bitcoin account free scam.

Fraudsters have sent links to a phishing campaign aimed at fooling naive investors with their coins. To deceive the users, the attackers disguised the fake gift in a special Black Friday deal.

The malicious e-mail was sent on November 21st around 19:50 UTC. Four hours later, Uphold sent another email to alert users of the phishing attempt and warn them not to participate in this "mock gift."

"IT IS AN ATTEMPT OF PHISHING, "writes the company in capital letters. "Do not send funds to the specified address. Do not click on the link. "

It remains unclear to what extent e-mail has been distributed and how many people have been seduced. At the time of writing this report, the address associated with the malicious campaign had only received two payments, for a total of Bitcoin of just over $ 2,200.

"We investigate the incident, "wrote the exchange office. "The Uphold platform and member funds remain totally secure and unaffected."

The company has since tweeted The e-mail "was not sent" by his team, but it comes from an official Uphold address, according to e-mails reviewed by Hard Fork.

Bitcoin cheap for Black Friday

Malicious e-mail promised users a return on investment of 15% on amounts between 0.1 and 50 BTC (approximately USD 450 to 222 000).

"The surprise is out! For the next days until Black Friday, we launch our Bitcoin Bucket Discount! "Get 15 [percent] back on your Bitcoin holdings with Uphold. "

"Mike sends 1 BTC to the Bucket wallet and receives 1.15 BTC on Black Friday," continued the malicious campaign. "Thank you for supporting Uphold since the first day!"

Since then, Hard Fork has obtained a copy of the phishing email:

Free scams

Although gift scams are not uncommon in the blockchain space, hackers have primarily targeted victims on Twitter so far. It now appears that the gift distribution program has been extended to e-mail campaigns.

For what it's worth, it's not the first time hackers have used email to target their victims. Earlier this year, the attackers raised over a million dollars after sending a malicious email campaign to hundreds of BeeToken investors.

In any case, it seems that Uphold has ruined everything for this one. We have contacted the company for more details, and will update our article accordingly if we have an answer.

And for those of you who have not received the memo: If someone offers you Black Friday discounts on cryptocurrency purchases, this is probably a scam.

Posted on 22 November 2018 – 13:41 UTC