Misspelling Soneium on Google could drain your crypto wallet: Scam Sniffer

As a seasoned researcher with years of experience under my belt, I have come to learn that the world of cryptocurrency is not for the faint-hearted or careless. The recent allegation by Scam Sniffer about a malicious website disguised as Sony’s Soneium crypto wallet is yet another grim reminder of the ever-present threat of cybercrime in this space.


According to Scam Sniffer, a seemingly innocent linked website advertisement for Sony’s blockchain project Soneium on Google could be secretly emptying cryptocurrency wallets.

In a post on October 22nd, the blockchain security company announced that their team discovered an advertisement appearing in Google search results for “someium”. This sponsored link led to a harmful website, which contained a tool that drains digital wallets.

Looked up ‘Soneium’ on Google and accidentally clicked a fraudulent advertisement, which led to the occurrence of phishing. It’s important to remember that phishing can still ensnare you even if you misspell a term like ‘Soneium’ as ‘Someium,’ as it often catches unsuspecting users.

Misspelling Soneium on Google could drain your crypto wallet: Scam Sniffer

In simpler terms, CryptoMoon failed to reproduce the results of the search. Scam Sniffer passed on the suspicious phishing link they found, which was disguised as a British radiology service’s website with an unusual domain suffix and had a basic, incomplete layout.

According to Scam Sniffer, the individuals behind CryptoMoon’s website employed particular strategies to conceal their malicious webpage from Google’s search results.

The issue isn’t apparent unless it specifically affects you, which is why Google might not have been aware of it,” the company explained.

Google did not immediately respond to questions about the alleged phishing link.

Sleepium is a blockchain platform built on Ethereum‘s layer 2 technology, which is a collaboration between Sony Block Solutions Labs (a joint venture between Sony Corporation and Startale Labs) and was officially launched for testing in August.

This past September, Scam Sniffer disclosed that approximately $46 million in cryptocurrency was taken from around 10,800 individuals who fell victim to phishing scams during the month.

It added over $127 million worth of cryptocurrencies were stolen from investors in the third quarter of 2024 and that Ether (ETH) wallets were the biggest target of crypto phishing attacks.

At the end of April, Scam Sniffer reported that more than four million dollars were swindled within just a couple of weeks from individuals tricked by deceitful phishing sites that were advertised through Google Search.

Scammers have been tricky by acquiring domain names that are nearly identical to the web addresses of cryptocurrency companies and their protocols, but with minor differences that can make it challenging for users to recognize they’ve clicked on a harmful link instead.

Read More

2024-10-22 09:09