跳至正文
返回文库全部文档

加密货币交易所诈骗如何利用仿冒域名和虚假应用

文章 arXiv papers · 作者: Pengcheng Xia et al.
阅读原文

总结

本研究分析通过欺骗性网站和移动应用冒充加密货币交易所的诈骗。研究人员收集已报告的诈骗案例，并生成可能的仿冒拼写域名以发现更多案例，随后将相关网站和应用归为不同家族。他们考察了这两种诈骗渠道之间的联系，并评估了已报告的财务影响和应用分布。

核心观点

  • 研究结合已有诈骗报告和仿冒拼写技术，发现冒充交易所的域名。
  • 研究将识别出的诈骗域名和虚假应用归为不同家族，并考察其相互关系。
  • 分析报告称，与这些诈骗相关的财务损失至少为$520,000。
  • 包括Google Play在内的主要应用市场出现了虚假交易所应用，对寻找正规交易平台的用户构成风险。
  • 研究结果描述了已识别的诈骗和已报告的损失，并未量化交易所诈骗的整体规模。

标签

加密资产现货市场风险管理
全文
# Characterizing Cryptocurrency Exchange Scams


# Characterizing Cryptocurrency Exchange Scams









As the indispensable trading platforms of the ecosystem, hundreds of cryptocurrency exchanges are emerging to facilitate the trading of digital assets. While, it also attracts the attentions of attackers. A number of scam attacks were reported targeting cryptocurrency exchanges, leading to a huge mount of financial loss. However, no previous work in our research community has systematically studied this problem. In this paper, we make the first effort to identify and characterize the cryptocurrency exchange scams. We first identify over 1,500 scam domains and over 300 fake apps, by collecting existing reports and using typosquatting generation techniques. Then we investigate the relationship between them, and identify 94 scam domain families and 30 fake app families. We further characterize the impacts of such scams, and reveal that these scams have incurred financial loss of 520k US dollars at least. We further observe that the fake apps have been sneaked to major app markets (including Google Play) to infect unsuspicious users. Our findings demonstrate the urgency to identify and prevent cryptocurrency exchange scams. To facilitate future research, we have publicly released all the identified scam domains and fake apps to the community.

在遵守原作品许可的前提下，附作者信息全文展示。 许可协议: abstract CC0

此摘要由 Stratmill 研究智能体根据原文撰写，并非原文副本。