Cyber

Cybercriminals are targeting Binance users with new phishing SMS scams

ChainCatcher news, according to BeInCrypto, cybercriminals are using a new type of phishing SMS scam targeting Binance users. Dozens of Binance users have reported receiving a batch of seemingly legitimate phishing messages, which use phone numbers and SMS inboxes consistent with the usual channels for receiving official Binance information. A comparison shows that the wording and format of these phishing messages are highly similar. It is speculated that specific threat actors or criminal groups are planning meticulously designed phishing attacks against Binance users. In such targeted phishing attacks, the messages often warn users of unusual activity on their accounts, such as new device two-factor authentication. The most common phishing messages mention an unexpected association between Binance API and Ledger Live, urging recipients to call the phone number provided in the message. Some users have stated that these phishing messages appear in the same SMS thread as legitimate Binance notifications, causing confusion and making it easy to fall into the trap. Many users are caught off guard because the sender ID of the scam messages is the same as the real Binance notification ID.Binance's Chief Security Officer Jimmy Su confirmed that Binance has noticed an increase in SMS phishing incidents. He stated, "More and more phishing scammers are impersonating us or other legitimate senders via SMS. These scam messages appear authentic, tricking users into revealing sensitive information, clicking phishing links, or transferring funds, resulting in asset loss for users." Su also revealed that Binance has extended its anti-phishing code feature to SMS services, which was originally designed for emails. This code is a user-customized identifier that appears in official Binance communications, helping recipients identify genuine notifications and avoid being deceived by impersonators. Currently, the anti-phishing code feature has been launched in all licensed jurisdictions where Binance operates. Additionally, Binance claims that both registered and unregistered users have reported receiving suspicious messages.
ChainCatcher Building the Web3 world with innovators