Scammers create spoof Blockworks site to drain crypto wallets

Phishing scammers cloned the websites of crypto media conduit Blockworks and Ethereum blockchain scanner Etherscan to trick unsuspecting readers into interacting with phishing sites.

A cloned Blockworks website displayed a fake “breaking” news story about an alleged multi-million dollar “approval vulnerability” on decentralized exchange Uniswap and encouraged users to visit the fake Etherscan website to revoke approval.

The fake Blockworks website (left) shows a fake breaking news story about the Uniswap vulnerability compared to the legitimate website (right).

The fake Etherscan website displays a purported token and smart contract approval checker, but actually contains a smart contract that can drain crypto wallets when connected.

related: Hacken: 85% of Crypto Carpets Did Not Report Audit in Q3

Phishing website (left) compared to legitimate Etherscan website (right).

Age checks of the domains showed that the fake Etherscan site – approvalscan.io – was registered on October 25, and the fake Blockworks site – blockworks.media was registered a day later.

Magazine: Ethereum Recaptures – Blockchain Innovation or a Dangerous House of Cards?