{"id":52355,"date":"2021-11-04T18:53:08","date_gmt":"2021-11-04T16:53:08","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=52355"},"modified":"2025-09-03T09:50:27","modified_gmt":"2025-09-03T06:50:27","slug":"metamask-and-phantom-wallet-users-lose-500000-to-google-ads-scam","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/metamask-and-phantom-wallet-users-lose-500000-to-google-ads-scam\/","title":{"rendered":"MetaMask and Phantom Wallet Users Lose $500,000 to Google Ads Scam"},"content":{"rendered":"<p>As a result of a widespread phishing campaign in search engines, hundreds of cryptocurrency wallet users transferred more than $500,000 to the scammers. <a href=\"https:\/\/research.checkpoint.com\/2021\/cpr-alerts-crypto-wallet-users-of-massive-search-engine-phishing-campaign-that-has-resulted-in-at-least-half-a-million-dollars-being-stolen\/\">Researchers from Check Point Research (CPR) report<\/a>.<\/p>\n<p>According to CPR researchers, the attackers impersonated the popular wallets MetaMask and Phantom and used Google ads to spread phishing links.<\/p>\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"632\" src=\"https:\/\/u1f987.com\/wp-content\/uploads\/C2-1024x632-1.jpeg\" alt=\"MetaMask and Phantom Wallet Users Lost $500,000 to Google Ads\" class=\"wp-image-155192\" srcset=\"https:\/\/u1f987.com\/wp-content\/uploads\/C2-1024x632-1.jpeg 1024w, https:\/\/u1f987.com\/wp-content\/uploads\/C2-1024x632-1-300x185.jpeg 300w, https:\/\/u1f987.com\/wp-content\/uploads\/C2-1024x632-1-768x474.jpeg 768w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>Data: Check Point Research.<\/figcaption><\/figure>\n<p>Phishing pages resemble the official wallet sites in design, but the apps installed from them are used to steal cryptocurrency.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>&#8220;When creating a new Phantom wallet, the phishing site generates a message about the secret phrase to recover the wallet for the attacker. In effect, when transferring funds, the user sends them directly to the scammers. In the case of MetaMask, they also attempt to steal the user&#8217;s seed phrase,&#8221; CPR said.<\/p>\n<\/blockquote>\n<p>In addition to wallets, hackers clone sites of decentralized exchanges, including Uniswap and PancakeSwap.<\/p>\n<p>CPR experts advised cryptocurrency holders to refrain from clicking on ads and to use only direct, known URLs.<\/p>\n<p>Earlier this year, Google prevented <a href=\"https:\/\/u1f987.com\/en\/news\/google-thwarted-a-large-scale-hack-of-youtube-channels-used-for-bitcoin-fraud\">a massive hack of YouTube channels<\/a> used for Bitcoin fraud.<\/p>\n<p>Follow ForkLog&#8217;s Bitcoin news on our <a href=\"https:\/\/telegram.me\/forklog\" target=\"_blank\" rel=\"nofollow noopener\">Telegram<\/a> \u2014 cryptocurrency news, prices and analysis.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As a result of a widespread phishing campaign in search engines, hundreds of cryptocurrency wallet users transferred more than $500,000 to the scammers.<\/p>\n","protected":false},"author":1,"featured_media":52356,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154,738,1287,1391,57],"class_list":["post-52355","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes","tag-google","tag-metamask","tag-uniswap-uni","tag-wallets"],"aioseo_notices":[],"amp_enabled":true,"views":"49","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/52355","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=52355"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/52355\/revisions"}],"predecessor-version":[{"id":52357,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/52355\/revisions\/52357"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/52356"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=52355"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=52355"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=52355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}