Bitcoin giveaway scams have been around for more than two years, but a new twist in tactics has helped scammers make more than $2 million over the past two months from Elon Musk's name.
The new trick involves the use of Bitcoin vanity addresses in order to give the scam more credibility in the eyes of a suspicious user.
Vanity addresses are Bitcoin addresses that incorporate a custom word in the address itself -- such as "1MuskPsV7BnuvMuHGWmmXUyXKjxp3vLZX6" or "1ELonMUsKZzpVr5Xok8abiXhhqGbdrnK5C."
Over the past month, Justin Lister, CEO of cyber-security firm Adaptiv, has been tracking the use of Bitcoin vanity addresses abusing Elon Musk's name in giveaway scams.
Lister has been collecting the addresses with the help of BitcoinAbuse, a website where users can report Bitcoin addresses abused in ransomware, extortions, cybercrime, and online scams.
In a spreadsheet shared with ZDNet earlier this week, the Adaptiv CEO said he tracked down 66 addresses that have been reported by scammed users on BitcoinAbuse.
Lister said the 66 addresses received more than 201 in Bitcoin since being created in late April 2020.
Since receiving the spreadsheet from Lister earlier this week, a 67th Elon Musk vanity address was also submitted to the BitcoinAbuse website. This vanity address held an additional 13.9 Bitcoin, which brought the total to 214 Bitcoin, a sum that now stands over $2 million at today's exchange rate.
The $2 million sum is enormous if we take into consideration the low effort required to run one of these scams.
Because BitcoinAbuse also requires users to add a short description of where they encountered the Bitcoin address, this made investigating the source of some of these scams much easier.
Based on ZDNet's review, most of the Bitcoin vanity URLs had been shared with the help of YouTube live streams.
Hackers hijacked high follower-count YouTube accounts, changed the account name and its graphics to mimic the account of a celebrity or a trusted brand, and then launched a live stream to broadcast their scam.
The scam relied on tricking users into sending Bitcoin to the scammers' address, on the promise of doubling their profits, part of the giveaway -- usually organized on the occasion of an important event in the celebrity/brand's history.
In our investigation, we found that hackers had either renamed the channels to Elon Musk's name, the SpaceX brand, or news outlets such as Euronews, seeking credibility.
The Bitcoin address was usually embedded either in the live stream itself, and users had to scan it with a QR code reader, or users were asked to visit a dedicated "giveaway" website.
But we're not reporting on something new here, with multiple of these fake Elon Musk giveaway live streams making the news this month alone [1, 2].
Bitcoin giveaway scams abusing the Elon Musk and SpaceX names have been going on all month, ever since SpaceX and Musk made the news last month for the company's first successful rocket launch carrying a live NASA astronaut crew.
Bitcoin and Ethereum giveaway scams have been around since at least February 2018, when the first such case was reported. Since then, the trick has gotten old and users have gotten better at spotting the scammers.
The role of the Bitcoin vanity address was to give more credibility to the scam and make it look authentic, similar to how "verified profiles" give more authenticity to accounts on social media sites like Twitter, Facebook, and Instagram.
The Bitcoin network doesn't have a way to "verify" addresses, so vanity addresses, which are hard to come by, are the closest thing to a "verified" Bitcoin address.
The trick of using Elon Musk vanity addresses was, obviously, successful, helping crooks net more than $2 million, but it wasn't the only one.
ZDNet also found other vanity addresses submitted to the BitcoinAbuse database and reported as being abused in similar YouTube-based giveaway scams.
We similarly found vanity addresses for SpaceX and Bill Gates. Both have been used in similar YouTube-hosted giveaway scams, with the Gates-themed addresses holding more than $100,000 in stolen funds.
In addition, we also found another Bitcoin vanity address that was not available on the BitcoinAbuse website. This one had been used for a giveaway scam that tried to take advantage of the recent launch of the Play Station 5 gaming console. Luckily, no user fell victim to such a scam.
Similar scams abusing Linus Torvald and Mark Zuckerberg's names have also been reported, along with brands like Facebook, Twitter, and even the UN.
As long as these scams have a giant return-on-investment and crooks make more than they spend setting up the scam, the "giveaway" scourge will continue to haunt cryptocurrency owners.
Users should be wary as these scams aren't limited to YouTube live streams only, and have been also spotted on Twitter, Facebook, Instagram, and more recently on TikTok -- similarly by hacking into high-follower profiles and broadcasting the scam for a short period.
In most cases, these scams are powered by hacked accounts sold on hacking forums for prices going from $5 to thousands, depending on the follower count. Taking into account that some scammers are making as much as $180,000 a day, the scams are most likely to go on for years, or until users stop falling for the scams.
Read more from the original source:
Elon Musk Bitcoin vanity addresses used to scam users out of $2 million - ZDNet
- Haringey: Further tales of Labour Party discontent on the 'Corbyn... - onlondon.co.uk - June 22nd, 2020 [June 22nd, 2020]
- West Bengal- The Israel for Hindu Bengalis? Its time to redeem the pledge on the day Bengal was partitioned - OpIndia - June 22nd, 2020 [June 22nd, 2020]
- Rocked to the core: Mining giants confront an ancient, incalculable risk - Sydney Morning Herald - June 22nd, 2020 [June 22nd, 2020]
- Flag flap: Retired UA prof says the American flag on Flattop is abuse of power by Dunleavy Administration - Must Read Alaska - June 22nd, 2020 [June 22nd, 2020]
- Perhaps We Don't Understand?- The End of the West - Visegrad Insight - June 22nd, 2020 [June 22nd, 2020]
- Beijings violent rise must be checked - The New Indian Express - June 22nd, 2020 [June 22nd, 2020]
- When riot cops came to Bowral - Red Flag - June 22nd, 2020 [June 22nd, 2020]
- From Prison to the Halls of Power: A Politician's Son Lobbies to Let People on Parole Vote - Lost Coast Outpost - June 22nd, 2020 [June 22nd, 2020]
- The remarkable life and legacy of indigenous leader Berta Cceras - Salon - June 22nd, 2020 [June 22nd, 2020]
- Move to annex parts of West Bank could come as early as July 1 - jewishpresstampa - June 22nd, 2020 [June 22nd, 2020]
- President says he will renew effort to end DACA protections - - KUSI - June 22nd, 2020 [June 22nd, 2020]
- Delhis urban planners must stop ignoring the shoddy infrastructure in its 135 urban villages - Scroll.in - June 22nd, 2020 [June 22nd, 2020]
- Japan to revise security strategy with halt to Aegis Ashore system : The Asahi Shimbun - Asahi Shimbun - June 22nd, 2020 [June 22nd, 2020]
- How my colonial smugness evaporated with one explosive revelation - Stuff.co.nz - June 22nd, 2020 [June 22nd, 2020]
- With the World Focused on the Pandemic, Israel Prepares to Annex Large Swaths of the West Bank - The Intercept - First Look Media - June 22nd, 2020 [June 22nd, 2020]
- Trump is about to land his 200th federal judge. The impact will last 'generations.' - NBC News - June 22nd, 2020 [June 22nd, 2020]
- Tribune Editorial: Make DACA the law of the land - Salt Lake Tribune - June 22nd, 2020 [June 22nd, 2020]
- Visualizing the True Size of Land Masses from Largest to Smallest - Visual Capitalist - June 22nd, 2020 [June 22nd, 2020]
- Harris's path on police reform littered with land mines | TheHill - The Hill - June 22nd, 2020 [June 22nd, 2020]
- Elon Musk denies threesome with Amber Heard and Cara Delevingne - Page Six - June 24th, 2020 [June 24th, 2020]
- Column: Tesla's reluctant commitment to cobalt a warning to others - Andy Home - Reuters - June 24th, 2020 [June 24th, 2020]
- Why Intelligent Minds Like Elon Musk and Steve Jobs Embrace the Rule of Awkward Silence - Inc. - June 24th, 2020 [June 24th, 2020]
- Artist turns Elon Musks viral tweets into illustrations that are now part of a colouring book - The Indian Express - June 24th, 2020 [June 24th, 2020]
- Elon Musk Is Attempting to Revolutionize HVAC Systems - ACHR NEWS - June 24th, 2020 [June 24th, 2020]
- How to land a job at Elon Musk's SpaceX, according to the rocket company's software team - CNBC - June 24th, 2020 [June 24th, 2020]
- Leaked Elon Musk Email, Plus Tesla Firmware 2020.24.6 and Texas Gigafactory Hearing - TheStreet - June 24th, 2020 [June 24th, 2020]
- Photos: Why The Gypsum Hills Are The 'Best Kept Secret' In Kansas - KMUW - July 10th, 2020 [July 10th, 2020]
- A Powerful Chief And Unexpected Splits: 6 Takeaways From The Supreme Court Term - HPPR - July 12th, 2020 [July 12th, 2020]
- One key solution to the world's climate woes? Canada's natural landscapes - The Narwhal - July 12th, 2020 [July 12th, 2020]
- 245 homes could be built on greenbelt land in the 'last village in Gloucester' - Gloucestershire Live - July 12th, 2020 [July 12th, 2020]
- From the Archives, 1995: Flagging reconciliation - The Age - July 12th, 2020 [July 12th, 2020]
- Navigating the Self: African Student Experiences in U.S. Higher Education - The Yale Politic - July 12th, 2020 [July 12th, 2020]
- What 9 GOP Campaign Consultants Really Think About Republicans Chances in November - Rolling Stone - July 12th, 2020 [July 12th, 2020]
- COMMENTARY: I propose changing the name of Jackson County to Jackson County - The Cherokee One Feather - Cherokee One Feather - July 12th, 2020 [July 12th, 2020]
- The end is now in sight for the fight to preserve west basin - The Canberra Times - July 13th, 2020 [July 13th, 2020]
- Beyond the Crossroads - bellacaledonia.org.uk - July 13th, 2020 [July 13th, 2020]
- Friction between liberal ideology and tribal sovereignty comes to the fore - Washington Examiner - July 13th, 2020 [July 13th, 2020]
- The General Election of 2020 - ft.lk - July 14th, 2020 [July 14th, 2020]
- WILLY MUTUNGA - Saba Saba at 30: The Struggle for Progressive Alternative Political Leadership in Kenya Continues - The Elephant - July 14th, 2020 [July 14th, 2020]
- Four traveller groups arrive in the Black Country - expressandstar.com - July 14th, 2020 [July 14th, 2020]
- America may vote Trump out, but will it ever lose his legacy? - Shout Out UK - July 14th, 2020 [July 14th, 2020]
- An international student's perspective on race relations on campus - University of Dallas University News - July 14th, 2020 [July 14th, 2020]
- TALKING POINT TUESDAY: Party representatives give their views on homelessness in the city - In Your Area - July 14th, 2020 [July 14th, 2020]
- Convoys mark 30th anniversary of Oka crisis as land dispute... - Todayville.com - July 14th, 2020 [July 14th, 2020]
- The fact that Peter Beinart 'no longer believes in a Jewish State' tells us a lot - Middle East Monitor - July 14th, 2020 [July 14th, 2020]
- Controversial decision to sell off land for 110 homes at Lakeside to be reconsidered by committee - Burnham and Highbridge Weekly News - July 14th, 2020 [July 14th, 2020]
- Supreme Court says eastern half of Oklahoma is Native American land - CNBC - July 14th, 2020 [July 14th, 2020]
- Ontario premier won't say if province will cover $1.35B deficit faced by Toronto - CTV News - July 18th, 2020 [July 18th, 2020]
- Being a nation and the bogey of self-determination - The Tribune India - July 18th, 2020 [July 18th, 2020]
- Mompremier happy to land with Sun - News from southeastern Connecticut - theday.com - July 18th, 2020 [July 18th, 2020]
- Book World: How elites distorted the meaning of populism - The Advocate - July 18th, 2020 [July 18th, 2020]
- Eriksmoen: North Dakota mother and daughter represented people they cared about in 'Wizard of Oz' and the real-life Emerald City - Grand Forks Herald - July 18th, 2020 [July 18th, 2020]
- Supreme Court ruling expanded tribal land. What does that mean for Arizona? - AZCentral - July 18th, 2020 [July 18th, 2020]
- Column: Should Slave Owner Jefferson Be a Hero? - Southern Pines Pilot - July 18th, 2020 [July 18th, 2020]
- Murder hornets, unexpected court rulings and nasty politics: 2020 has it all - Bangor Daily News - July 19th, 2020 [July 19th, 2020]
- Liberal Zionism begins to make the journey towards a one-state solution - Middle East Eye - July 19th, 2020 [July 19th, 2020]
- Renaming the Army Bases - The New York Times - July 19th, 2020 [July 19th, 2020]
- Trump opponents' worst traits are Trump's fault | News, Sports, Jobs - Minot Daily News - July 21st, 2020 [July 21st, 2020]
- Here's how much men and women earn at every age - CNBC - July 21st, 2020 [July 21st, 2020]
- From fighting Covid-19 to locusts, drones showcase their potential and wide user-applications - DNA India - July 21st, 2020 [July 21st, 2020]
- Anglin: History illuminated as the sun sets on Ranger - San Antonio Express-News - July 21st, 2020 [July 21st, 2020]
- Art for trying times: reading Richard Ford on a world undone by calamity - The Conversation AU - July 21st, 2020 [July 21st, 2020]
- Kelly Hawes column: Supreme Court holds government to its word - The Herald Bulletin - July 21st, 2020 [July 21st, 2020]
- The Care of our COMMON HOME fires up Priests of Goa - Oherald - July 21st, 2020 [July 21st, 2020]
- Mandryk: Pandemic concerns should have trumped Buffalo grievances - The Province - July 21st, 2020 [July 21st, 2020]
- If Democrats Win, They Must Show Israel That Unilateral Annexation Has Consequences - Foreign Policy - July 21st, 2020 [July 21st, 2020]
- Controversial Lakeside land decision to be reconsidered at virtual meeting this month - Burnham and Highbridge Weekly News - July 21st, 2020 [July 21st, 2020]
- Unable to land hits on Biden, Trump paints him as socialist Trojan horse - NBC News - July 21st, 2020 [July 21st, 2020]
- Do we need to stop eating meat? - Telegraph.co.uk - July 27th, 2020 [July 27th, 2020]
- The Forgotten History of the Jewish, Anti-Zionist Left - Jacobin magazine - July 27th, 2020 [July 27th, 2020]
- Israeli Settlements in the West Bank: Why Palestine is More Vulnerable Than Ever - International Policy Digest - July 27th, 2020 [July 27th, 2020]
- Whose natural resources are they anyway? - Deccan Herald - July 27th, 2020 [July 27th, 2020]
- 'Vande Mataram': My Shock Recognition About Claims to the Matrubhoomi - The Wire - July 27th, 2020 [July 27th, 2020]
- Great American Outdoors Act heads to Trump as Cory Gardner leans on measure in reelection bid - The Colorado Sun - July 27th, 2020 [July 27th, 2020]
- Opposition calls for Sixfields deal to be open to scrutiny but council denies agreement is reached with Cobblers - Northampton Chronicle and Echo - July 29th, 2020 [July 29th, 2020]
- In the News: Wednesday, July 29 - capitalcurrent.ca - July 29th, 2020 [July 29th, 2020]
- Militias' warning of excessive federal power comes true but where are they? - Thehour.com - July 29th, 2020 [July 29th, 2020]
- Supreme Court ruling a reminder of how badly Native Americans have been treated | Quigley - nj.com - July 29th, 2020 [July 29th, 2020]
- Ethics commissioner expands probe of Morneau on eve of PM's WE testimony - The Outlook - July 30th, 2020 [July 30th, 2020]
- Militias' warning of excessive federal power comes true but where are they? - Jacksonville Journal-Courier - July 30th, 2020 [July 30th, 2020]