Hackers used Bitcoin.org to conduct a cryptocurrency giveaway scam. A pop-up instructed users to send Bitcoin to a QR code address in exchange for double the amount. Doubling scams are common in the crypto space, with high-profile websites and personalities frequently used to carry them out.
Bitcoin.org, a popular website that provides information about the Bitcoin cryptocurrency, has been compromised by hackers who are running a giveaway scam.
Bitcoin.org Is Being Used In A Giveaway Scam
Bitcoin.org was compromised for a giveaway scam due to an unfortunate security failure, users reported Thursday morning. Visitors to the website were greeted with a popup instructing them to send cryptocurrency to a Bitcoin wallet using a QR code in order to receive double the amount in return.
In order to lure people into the scam, the fake message informed visitors that the Bitcoin Foundation was giving back to the community and that the giveaway would be limited to the first 10,000 users. Users were unable to navigate past the bogus pop-up message, rendering the rest of the website inaccessible for the duration of the scam.
The Bitcoin address used in the scam received 0.40BTC, which was worth $17,000 at the time. The hacker transferred nearly all of the funds from the main wallet to two other holding wallets.
Bitcoin.org, founded in August 2008 by Bitcoin’s pseudonymous creator Satoshi Nakamoto, serves as a knowledge hub for the top cryptocurrency. It hosts a variety of resources on Bitcoin, including the original whitepaper and developer documentation.
According to Bitcoin.org’s pseudonymous operator CobraBitcoin, the attackers may have gained unauthorized access by exploiting a flaw in the website’s domain name system (DNS). Websites are typically crawled by hackers in order to identify underlying vulnerabilities that can be used to orchestrate attacks.
The website has been restored to its pre-hack state after being taken offline for a few hours to investigate the root cause of the security breach.
The Bitcoin.org exploit is not the first “double your money” scam to hit the cryptocurrency community. Scams involving cryptocurrency giveaways frequently use popular web platforms and fake or hacked celebrity social media accounts to fool users into believing the scam is legitimate.
Last year, the Twitter accounts of Binance CEO ChangPeng Zhao, Bill Gates, Elon Musk, and other prominent figures in the crypto community were hacked in order to carry out a doubling scam, in which users were asked to send Bitcoin to an unnamed wallet in exchange for a double return. According to the Federal Trade Commission in the United States, impersonators of Tesla CEO Elon Musk have stolen at least $2 million from investors through similar schemes.