security awareness

Slow Fog CISO: Beware of SMS phishing attacks targeting Binance users, and we recommend that Binance conduct a thorough investigation into this issue

ChainCatcher news, according to a post by Slow Mist CISO 23pd on platform X warning, "Attention, the latest SMS phishing attacks targeting Binance users have emerged. Recently, two individuals received the same phishing SMS on the same day, and the phishing SMS even appeared in the conversation thread of official Binance messages, appearing in the same context as previous genuine official messages, sharing the same channel. Even more astonishingly, there was a significant time span, precisely forging the official SMS environment.The current possible explanation is that the SMS channel has been exploited or hijacked by the phishers. The first SMS indeed came from the official number, but the subsequent scam messages may indicate that:Scammers spoofed the official SMS source (SMS Spoofing)• They used technical means to spoof the SMS sending number, making it appear consistent with the official number, allowing phishing messages to blend into the official conversation thread.They exploited vulnerabilities in the SMS gateway or supply chain attacks• Scammers may have attacked the SMS gateway or exploited security vulnerabilities of carriers/third-party SMS service providers, successfully embedding phishing messages into the official channel.• There may even be collusion with unscrupulous SMS providers to directly spoof official SMS replies, making it difficult for users to discern authenticity.Please have Binance officials investigate the issue, and everyone is advised to enhance security awareness and pay attention to fund safety."

Ledger executives: Bull market cycles may lead to complacency in security awareness, self-custody is very important

ChainCatcher news, according to Cointelegraph, Ledger's Chief Experience Officer Ian Rogers emphasized the importance of maintaining security awareness during bull market cycles in an interview at the Token2049 conference in Singapore. Rogers stated, "In every bull market cycle, there are always people who find seemingly reasonable justifications to compromise on security or self-custody." He specifically mentioned that during periods of rapid market expansion, many cryptocurrency holders tend to store their assets on centralized exchanges rather than opting for self-custody.In response, Rogers emphasized, "If you are not doing self-custody, then what is the point of choosing cryptocurrency?" He warned investors against over-relying on centralized exchanges, especially during market downturns, and cited the now-defunct cryptocurrency exchange FTX as an example. "What they did was simply hand over funds to someone in the Bahamas and then add a column of data on a spreadsheet. That is not called cryptocurrency; that is called fraud."Beyond the cryptocurrency space, Rogers also pointed out the rising trend of global cybercrime. He predicted, "From now on, you can say every year that this year is the worst year for cybercrime, and that statement will always be accurate." To address this increasingly severe threat, Rogers suggested achieving secure self-custody of digital assets through hardware solutions and clear signature technology, ensuring that users fully understand the transactions they are authorizing.
ChainCatcher Building the Web3 world with innovators