Scammers create spoof Blockworks site to drain crypto wallets

Phishing scammers have cloned the websites of crypto media outlet Blockworks and Ethereum blockchain scanner Etherscan to trick unsuspecting readers into interacting with a phishing site.

A cloned Blockworks site displays a fake “BREAKING” news report of a supposed multimillion-dollar “approvals exploit” on the decentralized exchange Uniswap and encourages users to a faked Etherscan website to rescind approvals.

The fake Blockworks website (left) shows a fake breaking news story of a Uniswap exploit compared to the legitimate website (right).

The fake Etherscan website, displaying a purported token and smart contract approval checker, instead contains a smart contract that would likely drain a crypto wallet when connected.

The phishing website (left) compared to the legitimate Etherscan website (right).

An age check of the domains shows the fake Etherscan site — approvalscan.io — was registered on Oct. 25, with the faked Blockworks site — blockworks.media registered a day later.

Source