Nostr Web Client

I have seen a scenario where once a target is on a network they use the "game center" feature that is on by default in ios to connect to your device. The "game" is a fake home screen that is shared onto the device "to be able to play with friends"

They spoof basic password prompts for icloud or email because you are interacting with a faked home screen on your phone.

He could punch in his password, they take that and drain funds, remove the game and he comes back to the real app later confused by what happened.

SuiGenerisJohn 8mo ago

That's an interesting method. This was all done remotely. My client accessed the legitimate Crypto dot com app (which I confirmed) but when he loads it a fake exchange was PWA overlaying the app where he did all kinds of fake trades and had fake balances and they sent and received crypto to and from their wallets to him (Which I confirmed on various chains) when they would let him "take a little profit" to keep him in the scam. Really wild shit.

Reply to this note

Please Login to reply.

Discussion

. 8mo ago

wow

SuiGenerisJohn 8mo ago

I know, I'm no developer, but I'm fairly techy and am baffled. As you can imagine, the end of my helping him was an invitation to burn the fuckin' phone and start new.

. 8mo ago

this is why i keep hardware locked up. Wifi free. One use per device. Only use on secure networks and air gapped.

SuiGenerisJohn 8mo ago

I've got my normie gear and my speciality devices and overall pretty good hygene. Also, even if I wasn't married, I wouldn't be taking tech/investment advice from some honey pot on a dating app which is how this shit often starts. Goes a long way to not get your wallet fucked when you don't try to fuck people you don't know through your phone.

. 8mo ago

I was so fortunate to come from an extremely distrusting background before bitcoin. I didn't trust myspace let alone some dating app 🤣

SuiGenerisJohn 8mo ago

My insular sicilian upbringing prepared me for this myself.