Users lose more than $15 million on fake HitBTC site

Attackers stole more than $15 million in Bitcoin, Ethereum, USDT and other cryptocurrencies through a fake HitBTC exchange site, according to SlowMist.

?MistTrack Scam Alert?

Fake site: hitbt2c[.]lol
Real site: hitbtc[.]com by @hitbtc

This scammer has stolen more than $15 million, including $BTC, $USDT, $ETH and other currencies. pic.twitter.com/i032uASW7y

— MistTrack?️ (@MistTrack_io) May 15, 2023

Experts from SlowMist noted that the phishing site uses three methods to steal users’ cryptocurrency:

• If a user approves a wallet connection, the scammers gain unlimited access to assets held in USDT;
• Like a real exchange, the site prompts a deposit to the scammers’ address (the function supports BTC, ETH and TRON);
• As with many similar schemes, the signature box pops up automatically, and pressing “Confirm” drains all Ethereum assets.

3⃣Like many phishing sites, the signature box pops up automatically. Once you click “Confirm”, your ETH will be stolen. pic.twitter.com/tpiAB0GP9g

— MistTrack?️ (@MistTrack_io) May 15, 2023

In October 2022, pointed out Binance CEO Changpeng Zhao.

In February, attackers stole $300,000 using a fake site tied to a well-known Ethereum conference.