CoinInsight360.com logo CoinInsight360.com logo
A company that is changing the way the world mines bitcoin

WallStreet Forex Robot 3.0
Crypto Potato 2025-01-25 16:52:15

Fake Ross Ulbricht Accounts Used in New Malware Campaign

Ross Ulbricht, the controversial creator of the Silk Road, has long been at the heart of debates about the intersection of technology and criminal activity. Following a full pardon from US President Donald Trump, a new wave of cybercrime has emerged, leveraging news of Ulbricht’s case to deliver malware to unsuspecting targets. Exploiting the news surrounding him, threat actors on X are redirecting users to a Telegram channel where they are duped into running PowerShell scripts that infect their devices with malware. Ross Ulbricht Malware Campaign According to vx-underground researchers’ latest update , the attack uses a new variation of the popular “Click-Fix” tactic, but with a twist. Rather than disguising itself as a common error fix, this version pretends to be a captcha or verification process required to join the channel. In this case, cybercriminals are impersonating Ulbricht using fake but verified accounts on X to lure users to Telegram channels falsely claimed to be official. Once on Telegram, users encounter a fraudulent “Safeguard” identity verification process, which leads them to a mini app that generates a fake verification dialog and automatically copies a PowerShell command to their clipboard. Users are then instructed to run the command via the Windows Run dialog. As such, executing the command triggers a chain of events. Initially, it downloads a PowerShell script, which retrieves a ZIP file from http://openline[.]cyou. The ZIP file contains several files, including identity-helper.exe, suspected to be a Cobalt Strike loader – a tool frequently used by attackers for remote access and launching ransomware or data theft campaigns. The entire process is carefully worded to avoid detection. Ross Ulbricht Released This development comes after Ulbricht was pardoned and released this week after being imprisoned since 2013 for founding and operating the infamous dark web marketplace Silk Road. Silk Road was an online marketplace on the Tor network that allowed people to trade illegal items, such as narcotics. Ulbricht operated the site using the pseudonym “Dread Pirate Roberts.” The FBI arrested him in October 2013 and took the site offline. In 2015, Ulbricht was found guilty of charges including drug distribution and money laundering. He received a life sentence without parole, and his appeals in 2017 and 2018 were denied. The post Fake Ross Ulbricht Accounts Used in New Malware Campaign appeared first on CryptoPotato .

Read the Disclaimer : All content provided herein our website, hyperlinked sites, associated applications, forums, blogs, social media accounts and other platforms (“Site”) is for your general information only, procured from third party sources. We make no warranties of any kind in relation to our content, including but not limited to accuracy and updatedness. No part of the content that we provide constitutes financial advice, legal advice or any other form of advice meant for your specific reliance for any purpose. Any use or reliance on our content is solely at your own risk and discretion. You should conduct your own research, review, analyse and verify our content before relying on them. Trading is a highly risky activity that can lead to major losses, please therefore consult your financial advisor before making any decision. No content on our Site is meant to be a solicitation or offer.