Privnote Phishing Scam Nets $18K in 5 Days, Users Warned
Cybercriminals have been exploiting the popularity of privnote.com, a secure messaging platform for crypto enthusiasts, to create phishing sites. These sites mimic the original to trick users into sending cryptocurrency to the crooks' own addresses. Privnote.com encrypts messages so even they can't read them, making it a prime target for phishers. The cybercrook, believed to be part of an unidentified group, has registered multiple domains like tornote[.]io and privatenote[.]io to deceive users. One such site, privnote[.]co, was found to have earned nearly $18,000 in cryptocurrencies in just five days in March 2024. The operation came to light after the cybercrook threatened to sue a software company. MetaMask's lead product manager, Taylor Monahan, confirmed that these sites were indeed swapping out cryptocurrency addresses. DomainTools revealed that many of these domains were registered to Alexandr Ermakov and Andrey Sokol, suggesting a larger network of phishing sites. The cybercrook's phishing operation has proven profitable, with one site earning a significant amount in a short period. Users are urged to be cautious when using such platforms and always double-check the URL and domain name to avoid falling victim to these scams. Law enforcement and cybersecurity experts are working to identify and dismantle this network.
