According to BeInCrypto, cybercriminals are using new phishing text messages to target Binance users. Dozens of Binance users reported that they received a batch of seemingly formal phishing text messages, and the phone numbers and SMS inbox they used were consistent with the channels they usually received Binance official information. After comparison, these phishing text messages have a very similar wording and format. Based on this, there are speculations that specific threat actors or criminal gangs are planning carefully designed phishing attacks against Binance users. In this type of targeted phishing attack, SMS often warns user accounts that have abnormal activity, such as adding new device dual-factor authentication. The most common phishing text messages mention the unexpected association of the Binance API with Ledger Live and urge the recipient to dial the phone number provided by the text message. Some users said that these phishing messages and legal Binance notifications appear on the same text message thread, which is confusing and easy to fall into a trap. Many users are unprepared because the sender ID of the text message is the same as the Binance Real Notification ID. Binance Chief Security Officer Jimmy Su confirmed that Binance has noticed an upward trend in SMS phishing. He said: "More and more phishing scammers impersonate us or other legal senders through text messages. These scam information seem real, tricking users into leaking sensitive information, clicking phishing links or transferring money, resulting in loss of users' assets." Su also revealed that Binance has expanded the anti-phishing code function to the SMS service, which was originally designed for email. This code is a user-defined identifier that will appear in Binance official information to help the recipient identify the real notification and avoid being deceived by impersonators. Currently, the anti-phishing code feature is available in all licensed jurisdictions operated by Binance. Additionally, according to Binance, users who have registered or unregistered have reported receiving suspicious text messages.
No comments yet