BlockBeats news, November 5: Binance founder CZ retweeted a warning posted by security researcher Anurag, stating that websites impersonating Trust Wallet have recently appeared, tricking users into connecting their crypto wallets under the pretext of "reviewing transfers."
The malicious JavaScript script supports Trust Wallet, Phantom, and OKX, can scan wallet balances through a backend API, and has preset fixed receiving addresses in an attempt to induce asset transfers.
Currently, the relevant transaction signing function has been disabled. Identified phishing domain: trastwallet.cam. CZ specifically reminded users to pay attention to the domain difference: .cam is not .com, and to beware of visiting counterfeit websites.
