Monthly report attached - January 2023


Bad BAL doppleganger sites detected and shared with vendors for removal: 22


Sneak-peek in my abuse mailbox:


Scams Balancer 1750 hits in 29* files

Search "(bolancer|balancer|balahcer|bqlancer|baIancer|balencer|baiencer|balancer-fi|balancer-fl|baiancer-fi|balencer-fi)" (1750 hits in 29 files of 29 searched)

As balancer is a common word and "Load Balancer" is often registered and present in subdomains alike, there is a lot to filter though, but the real number of scams is fairly low, about 22 from 1750, or 1.25%.


*Data for 3 days is present in one file, thus 29 files instead of 31.

Metamask, airdrop, walletconnect, etc:

Search "airdrop" (294 hits in 29 files of 29 searched)
Search "coinbase" (368 hits in 29 files of 29 searched)
Search "elonmusk" (282 hits in 29 files of 29 searched)
Search "metamask" (612 hits in 29 files of 29 searched)
Search "pancakeswap" (202 hits in 28 files of 29 searched)
Search "sushiswap" (68 hits in 21 files of 29 searched)
Search "trustwallet" (32 hits in 14 files of 29 searched)
Search "walletconnect" (19 hits in 11 files of 29 searched)



*Data for 3 days is present in one file, thus 29 files instead of 31.

jaw drop clip art - Clip Art
        LibraryTotal potential bad hits for the month ~27K

Search "(coinbase|colnbase|c0inbase|c0lnbase|cornbase|coirbase|balancer|balahcer|bqlancer|baIancer|[a-zA-Z]*1inch[a-zA-Z]*|[a-zA-Z]*1inch-[a-zA-Z]|[a-zA-Z]*oneinch[a-zA-Z]*|a-zA-Z]*1-inch[a-zA-Z]*|a-zA-Z]*1-inch[a-zA-Z]*|[a-zA-Z]*1inch[a-zA-Z]*|[a-zA-Z]*pancakesw[a-zA-Z]*|[a-zA-Z]*pancakesv[a-zA-Z]*|[a-zA-Z]*pancokesv[a-zA-Z]*|[a-zA-Z]*pancokesw[a-zA-Z]*|[a-zA-Z]*pancakosw[a-zA-Z]*|[a-zA-Z]*pancakkesw[a-zA-Z]*|[a-zA-Z]*pancake5[a-zA-Z]*|[a-zA-Z]*uniswap[a-zA-Z]*|[a-zA-Z]*uniswap-[a-zA-Z]|[a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*uni-[a-zA-Z]*|[a-zA-Z]*unisvv[a-zA-Z]*|unlswap"|[a-zA-Z]*uniswap[a-zA-Z]*|[a-zA-Z]*uniswap-[a-zA-Z]|[a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*uni-[a-zA-Z]*|[a-zA-Z]*pancakesw[a-zA-Z]*|[a-zA-Z]*pancakesv[a-zA-Z]*|[a-zA-Z]*pancokesv[a-zA-Z]*|[a-zA-Z]*pancokesw[a-zA-Z]*|[a-zA-Z]*pancakosw[a-zA-Z]*|[a-zA-Z]*pancakkesw[a-zA-Z]*|[a-zA-Z]*uniswap[a-zA-Z]*|[a-zA-Z]*uniswap-[a-zA-Z]|[a-zA-Z]*unisvap[a-zA-Z]*|dapp|wallets|wallect|synchr|rectify|unlock|walet|1inch|airdrop|ethereum|walet|wallet|coinbase|uniswap|pancakeswap|liquidity|vvallet|metamask|metamaks|metemask|metamaks|paraswap|exchange|liquidity|kraken|bitso|dapp|sushiswap|sushlswap|sushisvv|opensea|polygon|walletconnect|waletconect|waiietconnect)" (27363 hits in 29 files of 29 searched)



Multiple offenders exposed and banned in Discord


 


Various warnings issued in Discord


Warning issued in Twitter

Fake apps google play store taken down - 3 this month

Not crypto specific, just mobile trojans that could steal your assets if a hacker takes control over a Mobile device.

69 GH pull requests (dot and metamask anti-phish repos) in January

https://github.com/dubstard