大家好～我們是防詐達人🙌投資詐騙、交友詐騙、各式各樣的釣魚連結，防詐達人提供最新的詐騙快訊與手法破解。當看到任何無法確定的訊息，也都可用防詐達人來查詢和回報唷～

[Fraud Master X Binance] New Type of Phishing! Binance YouTube channel with the first search result turned out to be fake

Aug 29, 2022 (edited)

Searching for Binance on Google, the top search result "Binance YouTube Channel" is actually fake! The wrong links are deliberately placed in the channel to induce the public to enter the phishing website to enter the account and password, or even a fake APP that has been implanted with viruses, stealing the victim's personal information and login credentials.

Phishing websites are a very common and long-standing type of online fraud. They are usually disguised as bank websites or online shopping. Except for the fact that the overall website looks very similar to the real one, some even the website address is difficult to identify. The main purpose of this kind of website is usually It is to defraud people's login account password

In the past, phishing websites often took the initiative to privately message victims through text messages, emails, fake activities, etc., and used some threatening or enticing words to induce people to click on the website to log in. For example, Binance is the cryptocurrency exchange with the largest trading volume. Therefore, it is often faked by fraudulent groups and publishes messages containing phishing websites. We have also published many articles to teach you how to prevent:

However, recently, Binance users reported another new type of phishing website model. Fortunately, users were alert enough to avoid falling into the scam. Today, Binance has once again partnered with anti-fraud experts to warn everyone about how this new type of phishing works and how to prevent it.

Real Case - Fake Binance YouTube Channel Really Stealing Money

The fraudulent group used the purchase of Google advertisements to guide users to the fake channel set up by the fraudulent group on YouTube, and placed a fake website in the profile to trick users into entering into a fake transaction. Or put a link to a fake installer in the channel. In fact, the installation file contains a Trojan virus that can steal all personal information, transaction accounts and passwords in the user's mobile phone and computer.

Whether you end up entering a phishing website or accidentally installing malicious software, your personal information will flow out, and your trading account will be stolen as a result, resulting in huge financial losses.

Fake Binance YouTube Channel Phishing Process

Step1. Search results are ranked first

Fraud groups use Google search engine keyword advertisements to target specific brand keywords. As long as users search, this website can appear in the top two search results. Many people think that the higher the search results, the more reliable the information. I even thought that as long as the number one ranking was the official website, in fact, this made myself fall into the trap of a fraud group.

For example, when searching for "Binance" on Google, a YouTube website called " binanceapp - Binance Download " appears in the second search result.

Although the results of each search are not the same, they all try to use YouTube to impersonate Binance , unlike the past phishing that uses self-built websites, or text messages, emails, etc. that allow users to pass URLs or senders . I have doubts

But do you have any doubts here? The search results of these fake Binance are a bit strange in the text order, and there are always inexplicable spaces or punctuation marks in the middle, such as "Binance" or "Binance Official Website"

Step2. Fake Youtube Channel

Through Google search results, we have found several fake Binance YouTube channels, namely:

Binance wallet
Binancewallet — Binance Exchange
currency
Binance Exchange Official Download

Not only are their names related to Binance, they even use Binance's logo as their avatar. They also introduce Binance as a company in the introduction, and attach many " installation links " at the bottom.

Here we also attach the real Binance YouTube channel for your comparison

As you can see, fakes usually have several characteristics compared to the real Binance YouTube:

Accounts created recently (less than a year ago)
Very few subscribers
No videos uploaded or other channel recommendations other than intro
All links are only to guide the installation file , the real Binance YouTube also put other community channel links

Just like the concept we taught you to identify phishing websites in the past, too short a creation time and too obvious intentions (as long as you download and log in) are obvious indicators of fraud!

Step3. Phishing/Virus Planting

These fake YouTube channels are empty. Although they are YouTube, they don't have any videos. Instead, they put up many hyperlinks, claiming to be able to go to the Binance official website and download the Binance software. In fact, these installation files are malicious software . The results of the anti-virus investigation (as follows) found that there were Trojan horse programs entrained in them.

TrendMicro - TROJ_GEN.R002C0PGN22
TrendMicro-HouseCall - TROJ_GEN.R002H07H222

Different Trojans bring different harms. Some allow hackers to remotely manipulate the victim's computer, some steal personal information, or use the keyboard to capture your login account and password, or even make your own computer a gangster. The Kui puppet network is used to do some malicious acts, but you don't know it.

In addition, there are also some fake YouTube channels that first take the public to the fake official website , allowing you to accidentally enter the Binance account password on these phishing websites, resulting in the account being stolen. Accidentally downloaded malware.

For example, we found that not only Binance, but also a fake Telegram channel "Telegram-Chinese Channel" on YouTube, the link in it was first taken to the phishing website "hxxps[:]//www[.]t-telegram[.]org/ ”, the real Telegram official website should be https://telegram.org/

Stop worrying about Binance phishing with these gadgets

Phishing tactics are always updated, sometimes using phrases such as "accounts will be frozen" and "time-limited benefits" to imply people to act quickly. Want to double check but worry about taking too much time or not knowing where to start? rest assured! Binance has always been very active in dealing with users' information security issues, so it is committed to providing small services to maintain user security. As long as you can use it, you are not afraid of encountering counterfeit Binance!

Here are three small tools to help you identify phishing websites

1. Set up Binance Anti-Phishing Code to see through fake Binance emails at a glance

Anti-phishing code is a security feature provided by Binance that can be used to prevent email phishing . I don’t know if you have noticed it. There is a sentence at the bottom of every Binance email: “ To stay secure, setup your phishing code here ”

After clicking the link to enable it, Binance will add the anti-phishing code you set to all emails sent to you. In this way, if you do not see this set of anti-phishing codes in the email, it means that this is not an official email!

2. Binance verifies whether it is a "real" Binance in one second

Any email address, phone number, WeChat ID, Twitter ID, or Telegram ID that claims to be related to Binance can be entered into Binance Verification , which will tell you if it comes from official Binance

3. Fraud experts check all suspicious links and LineID

Anti-fraud experts provide free Line chatbot service, you only need to pass any link you think suspicious to anti-fraud experts, no matter which brand of phishing website is fake, it can be found in a second

If you encounter a suspicious person claiming that the customer service wants you to add to it, as long as you have his LineID, you can directly pass it to the anti-fraud expert for inquiries. Please see here for the inquiry method.