{"id":78754,"date":"2023-05-15T16:38:35","date_gmt":"2023-05-15T13:38:35","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=78754"},"modified":"2025-09-11T07:09:37","modified_gmt":"2025-09-11T04:09:37","slug":"users-lose-more-than-15-million-on-fake-hitbtc-site","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/users-lose-more-than-15-million-on-fake-hitbtc-site\/","title":{"rendered":"Users lose more than $15 million on fake HitBTC site"},"content":{"rendered":"<p>Attackers stole more than $15 million in Bitcoin, Ethereum, USDT and other cryptocurrencies through a fake HitBTC exchange site, according to SlowMist.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">?MistTrack Scam Alert?<\/p>\n<p>Fake site: hitbt2c[.]lol<br \/>Real site: hitbtc[.]com by <a href=\"https:\/\/twitter.com\/hitbtc?ref_src=twsrc%5Etfw\">@hitbtc<\/a><\/p>\n<p>This scammer has stolen more than $15 million, including <a href=\"https:\/\/twitter.com\/search?q=%24BTC&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$BTC<\/a>, <a href=\"https:\/\/twitter.com\/search?q=%24USDT&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$USDT<\/a>, <a href=\"https:\/\/twitter.com\/search?q=%24ETH&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$ETH<\/a> and other currencies. <a href=\"https:\/\/t.co\/i032uASW7y\">pic.twitter.com\/i032uASW7y<\/a><\/p>\n<p>\u2014 MistTrack?\ufe0f (@MistTrack_io) <a href=\"https:\/\/twitter.com\/MistTrack_io\/status\/1658050314774384642?ref_src=twsrc%5Etfw\">May 15, 2023<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Experts from SlowMist noted that the phishing site uses three methods to steal users\u2019 cryptocurrency:<\/p>\n<ul class=\"wp-block-list\">\n<li>If a user approves a wallet connection, the scammers gain unlimited access to assets held in USDT;<\/li>\n<li>Like a real exchange, the site prompts a deposit to the scammers\u2019 address (the function supports BTC, ETH and TRON);<\/li>\n<li>As with many similar schemes, the signature box pops up automatically, and pressing \u201cConfirm\u201d drains all Ethereum assets.<\/li>\n<\/ul>\n<blockquote class=\"twitter-tweet\" data-conversation=\"none\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">3\u20e3Like many phishing sites, the signature box pops up automatically. Once you click \u201cConfirm\u201d, your ETH will be stolen. <a href=\"https:\/\/t.co\/tpiAB0GP9g\">pic.twitter.com\/tpiAB0GP9g<\/a><\/p>\n<p>\u2014 MistTrack?\ufe0f (@MistTrack_io) <a href=\"https:\/\/twitter.com\/MistTrack_io\/status\/1658050320658989056?ref_src=twsrc%5Etfw\">May 15, 2023<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>In October 2022, <a href=\"https:\/\/u1f987.com\/en\/news\/binance-chief-warns-that-google-search-results-promote-phishing-sites\">pointed out<\/a> Binance CEO Changpeng Zhao.<\/p>\n<p>In February, attackers <a href=\"https:\/\/u1f987.com\/en\/news\/phishing-ads-for-lido-defillama-and-zapper-led-to-theft-of-over-4-million\">stole $300,000<\/a> using a fake site tied to a well-known Ethereum conference.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Attackers stole more than $15 million in Bitcoin, Ethereum, USDT and other cryptocurrencies through a fake HitBTC exchange site, according to SlowMist.<\/p>\n","protected":false},"author":1,"featured_media":78755,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44,1246],"class_list":["post-78754","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime","tag-scammers"],"aioseo_notices":[],"amp_enabled":true,"views":"157","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/78754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=78754"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/78754\/revisions"}],"predecessor-version":[{"id":78756,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/78754\/revisions\/78756"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/78755"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=78754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=78754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=78754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}