Crypto Trading Bot Scam on YouTube Steals Over 256 ETH, Warns SentinelLABS
June 2024 – Cybersecurity experts at SentinelLABS have uncovered a widespread and ongoing scam leveraging aged YouTube accounts to promote malicious crypto trading bots that drain users’ funds.
Scam Tactics Exploiting Trusted Crypto Channels
According to a report published Tuesday by SentinelLABS, cybercriminals have taken control of or purchased long-established YouTube accounts—previously known for posting crypto news and investment tips—to advertise a fraudulent trading bot. These accounts, appearing credible due to their history and subscriber base, are used to distribute videos that instruct viewers on deploying a so-called crypto trading bot, but in reality, the smart contracts involved are designed to steal cryptocurrency.
Alex Delamottea, senior threat researcher with SentinelLABS, revealed that once a victim deploys the bot’s smart contract and funds it—typically with a minimum of 0.5 Ether (ETH), currently worth approximately $1,829—the attacker’s wallet, cleverly disguised as a legitimate trading address, gets secretly added. This allows scammers to siphon off the victim’s funds directly from the contract.
“The cryptocurrency ecosystem is increasingly complex, and scams like these will inevitably succeed against victims who do not thoroughly analyze how related tools work by scrutinizing what the inputs and outputs are,” Delamottea explained.
Significant Losses Documented
SentinelLABS’ investigation uncovered that the scammers have collectively stolen more than 256 ETH to date, with illicit wallet addresses holding sums such as 7.59 ETH, 4.19 ETH, and a staggering 244.9 ETH—together valued at over $939,000. The research indicates some wallets are reused across multiple scam smart contracts, but many unique fraudulent addresses are active, making it difficult to estimate the number of perpetrators involved.
Sophisticated Deception with AI-Generated Content and Fake Testimonials
The scam videos themselves exhibit signs of AI-generated content, including synthetic audio and visual elements, allowing the attackers to churn out numerous deceptive videos without revealing new personal identities. These videos often delete critical or negative user comments, while the comment sections feature fabricated testimonials claiming profits, further misleading potential victims.
Delamottea noted, “Several videos appear to be AI-generated based on audio and visual tells, which makes it easier for actors to create multiple scam videos without having to take on a new identity.”
Moreover, savvy crypto users seeking additional information often must resort to third-party platforms like Reddit to uncover the truth as the YouTube comment sections are closely moderated by the scammers.
Warning to Crypto Users: Exercise Extreme Caution
SentinelLABS emphasizes that these scams are proliferating because they continue to be profitable for ill-intentioned actors. Delamottea strongly advises crypto traders and enthusiasts to avoid deploying any smart contract code promoted via unverified YouTube influencer videos or social media posts, especially those promising quick and guaranteed profits.
“To defend against these types of scams, crypto traders are advised to avoid deploying code shilled through influencer videos or social media posts, particularly if it’s offering a way to make money fast,” she warned.
She added that users should rigorously research and validate how any trading tool functions before using it, steering clear of anything that appears too good to be true.
Staying Vigilant in a Complex Crypto Environment
This latest scam underscores the evolving complexities and risks within the cryptocurrency ecosystem. With the increase in AI-generated content and the availability of aged YouTube channels for sale—often advertised through platforms like Telegram—scammers have found novel approaches to exploit unsuspecting victims.
Crypto enthusiasts are urged to remain vigilant by:
- Scrutinizing the authenticity of trading bots and related contracts.
- Avoiding interaction with unverified social media recommendations.
- Consulting trusted sources and community feedback on platforms known for reliable discussion.
- Monitoring crypto transactions and wallet activity closely.
For further updates on cybersecurity threats and best practices to protect your digital assets, continue following Cointelegraph’s dedicated coverage on blockchain security and anti-scam initiatives.
By Stephen Katte, Cointelegraph
Published June 2024
Related Topics: Blockchain, Cryptocurrencies, Ethereum, Cybersecurity, YouTube Scams, Social Media Fraud.