Article Details

Original Article Text

Click to Toggle View

X users fed up with constant stream of malicious crypto ads. Cybercriminals are abusing X advertisements to promote websites that lead to crypto drainers, fake airdrops, and other scams. Like all advertising platforms, X, formerly known as Twitter, claims to show advertisements based on a user's activity, leading to ads that match users' interests. While Elon had previously tweeted that YouTube is nonstop scam ads, X appears to have its own problem, increasingly showing advertisements promoting cryptocurrency scams. These scams include links to Telegram channels promoting pump and dumps, phishing pages, and links to sites hosting crypto drainers, which are malicious scripts that steal all the assets in a connected wallet. As X shows advertisements based on users' interests, those not involved in cryptocurrency may not see these ads. However, those who frequent the space are now bombarded by what appears to be an endless stream of malicious ads. "Im not lying when I say EVERY single ad I am seeing on X is a scam link targeted at crypto to drain peoples wallets," reads a post on X. While attackers have been abusing X's ad platform for some time, the sheer volume of malicious ads has increased rapidly over the past month, causing security researcher MalwareHunterTeam to track them. The researcher has been posting screenshots of X ads containing crypto scams, almost all coming from verified users. It has gotten so bad that other X users must leave community notes on ads to warn others that they are scams or wallet drainers. Last month, ScamSniffer reported that a cryptocurrency drainer named 'MS Drainer' that is promoted in Google Search and X advertisements, had stolen $59 million from 63,210 victims over nine months. On X, the threat actors created advertisements that pretended to be a limited-edition NFT collection called Ordinals Bubbles, fake airdrops, and new token launches. It's unclear what vetting process X has in place to prevent these ads, but many users are frustrated that there is not much scrutiny on what ads are allowed to run on the site. Bloomberg reported last month that X's ad revenue is projected to drop by $2.5 billion, an over 50% drop in revenue from 2022. This has led X users to believe that Twitter is turning a blind eye to these malicious ads to bolster its dwindling advertising revenue. BleepingComputer did not contact X about this story, as they have not responded to our previous press emails.

Daily Brief Summary

CYBERCRIME // Rampant Crypto Scams Plague Popular Social Platform's Ads

A surge in advertisements on X (formerly known as Twitter) is leading users to malicious sites offering cryptocurrency scams.

Scammers abuse the platform's advertising system to display crypto drainer scams, fake airdrops, and phishing operations, taking advantage of users' crypto-related interests.

Security researcher MalwareHunterTeam has been documenting and alerting others of the prevalent scam advertisements, with many originating from verified accounts.

Community warnings emerge as vigilant users try to alert others about the fraudulent ads and wallet draining schemes.

A notable 'MS Drainer' scam was reported to have stolen $59 million from over 63,000 victims within nine months through deceptive ads on Google Search and X.

User frustration is mounting over the platform's apparent lax ad vetting process amidst speculation that a sharp decline in ad revenue is leading to less scrutiny on ad content.

X's diminished response rate to press inquiries underscores the growing concern regarding ad-related cybercrime on the platform.