Security platforms warn about hidden phishing and wallet drainer links

Millions at risk from hidden links

With the rise in phishing attacks targeting crypto assets, security platforms are warning users about the threat of hidden links that drain wallets. These hidden links can be found on various messaging platforms, posing a serious risk to users.

New warning from Web3 security provider

Last week, Web3 security provider Pocket Universe revealed how scammers are using hidden wallet drainer links on the instant messaging platform Discord. While some users have reported that this feature is relatively new, the ability to embed links in text has been available on multiple social platforms for a while now.

A longstanding problem for hackers

According to cybersecurity professionals, this type of attack has been occurring since the early days of the internet. Christian Seifert, a researcher at Forta Network, explained that hyperlinks with text have always been susceptible to phishing attacks. Hackers are always finding new ways to exploit platforms.

An in-depth defense approach

Seifert emphasizes that both platforms and users need to take steps to protect themselves. Users can utilize plugins to safeguard against scams, while platforms need to improve their security measures. Discord, for example, provides information on the true destination of a URL after it is clicked, but scammers can still abuse the trust feature.

Vigilance and education are key

Hugh Brooks, director of security operations at CertiK, agrees that users have a responsibility to be cautious and proactive. He advises users to cross-check web addresses and utilize phishing warning lists and browser extensions. Platforms also need to continuously review and refine their security features.

Making security a priority

Brooks suggests that platforms should implement measures such as message filtering from trusted contacts. He commends Meta's "Facebook Protect" as an example of a platform that prioritizes user security. Ultimately, both platforms and users must foster a culture of vigilance and awareness to combat these threats.