Thursday , April 24 2025

Unmasking Million-Dollar Crypto romance scam by Sophos

Cybersecurity firm Sophos has uncovered a pig-butchering ring that managed to steal over $1 million from its victims in just three months.

Translated from Chinese as “shā zhū pán,” this intriguing term describes a captivating blend of romance and fraud, skillfully coaxing victims into investing in deceptive cryptocurrency ventures.

SonicWall patched SSLVPN Vuln Allowing Firewall Crashing

SonicWall has revealed a vulnerability in its SonicOS SSLVPN Virtual Office interface that could let remote attackers crash firewall appliances....
Read More
SonicWall patched SSLVPN Vuln Allowing Firewall Crashing

GitLab Releases Security Update For Multiple Vulns

GitLab has announced a security advisory urging users to upgrade their self-managed installations right away. Versions 17.11.1, 17.10.5, and 17.9.7...
Read More
GitLab Releases Security Update For Multiple Vulns

ISPAB president “whatsapp” got hacked via phishing link

Imdadul Haque, the president of Internet Service Provider of Bangladesh (ISPAB) said, I automatically got back my WhatsApp account. What...
Read More
ISPAB president “whatsapp” got hacked via phishing link

Zyxel released patches 2 vulns in its USG FLEX H series firewalls

Zyxel Networks has issued critical security patches for two high-severity vulnerabilities in its USG FLEX H series firewalls. These flaws...
Read More
Zyxel released patches 2 vulns in its USG FLEX H series firewalls

South Korea’s largest SK Telecom Hit by Malware: SIM-related info leaked

South Korea's largest mobile operator, SK Telecom, is warning that a malware infection allowed threat actors to access sensitive USIM-related...
Read More
South Korea’s largest SK Telecom Hit by Malware: SIM-related info leaked

ChatGPT Develops Exploit for CVEs Before Public PoCs Share

Security researcher Matt Keeley showed that artificial intelligence can now develop working exploits for critical vulnerabilities before public proof-of-concept (PoC)...
Read More
ChatGPT Develops Exploit for CVEs Before Public PoCs Share

TP-Link Router Vulns Allow to Execute Malicious SQL Commands

Several vulnerabilities have been found in TP-Link routers, exposing users to serious security risks from SQL injection flaws in their...
Read More
TP-Link Router Vulns Allow to Execute Malicious SQL Commands

SSL.com’s domain validation system’s bug found: Hacker exploited

SSL.com has revealed a major security flaw in its domain validation system, which could enable attackers to acquire fake SSL...
Read More
SSL.com’s domain validation system’s bug found: Hacker exploited

Amazon Follows Microsoft’s Lead, Halts Some Data Center Deals

Amazon has paused some data center lease negotiations for its cloud division, particularly in international markets, according to Wells Fargo...
Read More
Amazon Follows Microsoft’s Lead, Halts Some Data Center Deals

Hackers Exploit Zoom’s Remote Control Feature for System Access

ELUSIVE COMET is a threat actor conducting a sophisticated attack campaign that uses Zoom's remote control feature to access victims'...
Read More
Hackers Exploit Zoom’s Remote Control Feature for System Access

An investigation was launched by Sophos following a courageous step from one of the victims, known as “Frank,” who chose to remain anonymous to safeguard his identity.

Frank claimed that he had suffered a significant financial loss of $22,000 earlier this year. He tragically fell victim to a deceitful individual who identified themselves as a German woman named “Vivian” on the dating application MeetMe.

Sophos’ researchers found 14 domains related to a scam operation. They also discovered many similar fraudulent websites. These websites were used by a group of pig butchers to make over $1 million in three months.

For weeks, Frank and Vivian, who was actually a scammer working for the ring, had frequent communication on MeetMe. Vivian, who claimed to be a US resident, persistently blended her romantic commitments with relentless efforts to persuade Frank into investing in cryptocurrency.

From May 31st to June 5th, Frank diligently deposited funds into his Trust Wallet account. Despite being a legitimate service, the pig butchers managed to deplete the funds in just three days. According to Sophos, these scams thrive due to the unregulated environment of decentralized finance (DeFi) cryptocurrency trading applications.

Sophos says that these applications establish “liquidity pools” consisting of different cryptocurrencies, which users can utilize to execute trades between different cryptocurrencies. By participating in the pool, you are entitled to a percentage of the fees generated from each trade, which offers a truly enticing return on your investment.

However, the true test lies at the moment when the investor finalizes an online smart contract – typically granting pool operators authorization to access wallets for trade facilitation purposes.

While it’s great to have a pool that operates legitimately, unfortunately, this one did not.

Sophos stated that pig butchers are using fake pools more and more to steal funds from their targets, employing a similar modus operandi. However, unlike legitimate pools, these scammers eventually deceive others and selfishly drain the entire liquidity pool.

 

Check Also

Australian Cyber Security Centre Alert for Fortinet Products

The Australian Cyber Security Centre (ACSC) has alerted technical users in both private and public …

Leave a Reply

Your email address will not be published. Required fields are marked *