How to identify scams like "zkSync" cryto scam

What is zkSync scam?

zkSync is a project dedicated to enhancing the efficiency of transactions on the Ethereum network. Unfortunately, malicious actors have devised a fraudulent zkSync page with the intent of deceiving users and illicitly obtaining their cryptocurrency. This scam is promoted via fraudulent emails and possibly other channels like social media platforms.

zkSync scam in detail

The scam page emphasizes a collective mission for universal personal freedom, aiming to connect with visitors who value independence. It introduces "AUTARCHY COMPENDIOUS" as an experimental NFT project, suggesting a unique opportunity in the cryptocurrency and NFT space.

The page encourages joining the "ZK Revolution". Implicitly, the message suggests cryptocurrency investment in AUTARCHY COMPENDIOUS, hinting at potential financial gains and exclusive benefits for early contributors, prompting a call to action for visitors to contribute funds.

The purpose of this scam site is to trick users into approving a malicious smart contract. This contract contains the code for a drainer. Once the user approves the malicious contract, the drainer can automatically perform unauthorized transactions on the victim's behalf. This includes transferring funds from the victim's cryptocurrency wallet to the attacker's wallet address.

The drainer operates as a phishing suite, taking advantage of user deception, malicious smart contracts, and unauthorized transactions to drain funds from cryptocurrency wallets. The attackers use various tactics, including promoting the drainer through email and ads on platforms like Google and Twitter, to lure unsuspecting users into interacting with the malicious infrastructure.

Threat Summary:

Name	zkSync crypto drainer
Threat Type	Phishing, Scam, Social Engineering, Fraud
Fake Claim	Participants will receive free cryptocurrency
Disguise	Experimental NFT project
Related Domain	capsule-zskync[.]net, reward-zksynk[.]club, zks-now[.]com, zkslnk-started[.]com, zks-foundation[.]com, zks-foundationlabs[.]net, sync-ecosystem[.]org
Detection Names	Trustwave (Phishing), Full List Of Detections (VirusTotal)
Symptoms	Fake websites (misleading URLs), too good to be true offers
Distribution methods	Email, compromised websites, rogue online pop-up ads, unwanted applications.
Damage	Loss of sensitive private information, monetary loss
Malware Removal (Windows)	To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. ▼ Download Combo Cleaner To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Conclusion

In conclusion, the deceptive tactics employed by the scam page, masquerading as an experimental NFT project with promises of financial gains and exclusive benefits, serve as a guise to exploit users. The underlying malicious smart contract, hidden behind the facade of "AUTARCHY COMPENDIOUS", reveals the true intention of the scam – to initiate a drainer that automatically siphons funds from users who unknowingly approve the malicious contract.

This scheme underscores the importance of vigilance within the cryptocurrency space, as users must remain cautious and discerning to protect themselves from evolving threats and fraudulent activities.

More examples of crypto-related scams are "BITCOIN ETF TOKEN", "X Token Presale", and "Bonk Coin".

How did I open a scam website?

The described scam page is promoted via email (a screenshot of that email is provided below). Scammers also leverage social media platforms, creating fake profiles or using compromised legitimate accounts to spread misinformation, false investment opportunities, or conduct giveaways that require users to send cryptocurrency for a chance to win.

Additionally, malicious advertisements on search engines and social media platforms contribute to the promotion of crypto scams. Some scammers go as far as hacking verified accounts on platforms like Twitter, posting deceptive content to gain trust from unsuspecting users.

How to avoid visiting scam pages?

Examine URLs carefully, ensuring they match the official domain of the intended website or platform. Be wary of unsolicited emails, messages, or social media posts that prompt immediate action or promise extraordinary returns. Do not trust ads and pop-ups on shady pages or allow websites of this kind to show notifications.

Download apps from official pages and app stores. Regularly review the list of installed programs and browser extensions to check if there are any suspicious apps that may promote scams or other content. Use reputable antivirus or anti-malware software and keep it updated.

If your computer is already infected with unwanted apps, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate them.

The appearance of the fake zkSync page (GIF):

Text on this page:

zkSync

era

AUTARCHY COMPENDIOUS
Our collective mission is to advance personal freedom for all. AUTARCHY COMPENDIOUS is an experimental NFT project. Join the ZK Revolution.

Email promoting this scam:

Text in the email:

Subject: Claim Your ($zkUSD) Airdrop Today!

zkSync Airdrop is now Live!

Dear zkSync Community,

We are thrilled to announce the zkSync Era Mainnet Airdrop, and we're making it even more exciting by adding 32 million zkSync to the total value of the airdrop! To be eligible , please follow the instructions below:

How to be Eligible:

Click the button below to bridge a minimum of $300 from the network of your choice to zkSync Era Mainnet:
 
After successfully bridging the minimum amount, you will receive your airdrop.

Claim Airdrop
 
Please ensure you have bridged the minimum amount and follow these steps promptly to secure your eligibility for the airdrop.

Thank you for participating in the zkSync Era Mainnet Airdrop. We appreciate your support.

Best regards,

zkSync Era Mainnet

Screenshot of another website promoting zkSync-themed scam:

Screenshot of a X (Twitter) post promoting this site:

Screenshot of yet another zkSync-themed drainer scam website (zks-foundation[.]com):

Screenshot of another drainer-type website (sync-ecosystem[.]org) promoting zkSync Airdrop scam:

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is zkSync crypto drainer?
• How to identify a pop-up scam?
• How do pop-up scams work?
• How to remove fake pop-ups?
• How to prevent fake pop-ups?
• What to do if you fell for a pop-up scam?

How to identify a pop-up scam?

Pop-up windows with various fake messages are a common type of lures cybercriminals use. They collect sensitive personal data, trick Internet users into calling fake tech support numbers, subscribe to useless online services, invest in shady cryptocurrency schemes, etc.

While in the majority of cases these pop-ups don't infect users' devices with malware, they can cause direct monetary loss or could result in identity theft.

Cybercriminals strive to create their rogue pop-up windows to look trustworthy, however, scams typically have the following characteristics:

• Spelling mistakes and non-professional images - Closely inspect the information displayed in a pop-up. Spelling mistakes and unprofessional images could be a sign of a scam.
• Sense of urgency - Countdown timer with a couple of minutes on it, asking you to enter your personal information or subscribe to some online service.
• Statements that you won something - If you haven't participated in a lottery, online competition, etc., and you see a pop-up window stating that you won.
• Computer or mobile device scan - A pop-up window that scans your device and informs of detected issues - is undoubtedly a scam; webpages cannot perform such actions.
• Exclusivity - Pop-up windows stating that only you are given secret access to a financial scheme that can quickly make you rich.

Example of a pop-up scam:

How do pop-up scams work?

Cybercriminals and deceptive marketers usually use various advertising networks, search engine poisoning techniques, and shady websites to generate traffic to their pop-ups. Users land on their online lures after clicking on fake download buttons, using a torrent website, or simply clicking on an Internet search engine result.

Based on users' location and device information, they are presented with a scam pop-up. Lures presented in such pop-ups range from get-rich-quick schemes to fake virus scans.

How to remove fake pop-ups?

In most cases, pop-up scams do not infect users' devices with malware. If you encountered a scam pop-up, simply closing it should be enough. In some cases scam, pop-ups may be hard to close; in such cases - close your Internet browser and restart it.

In extremely rare cases, you might need to reset your Internet browser. For this, use our instructions explaining how to reset Internet browser settings.

How to prevent fake pop-ups?

To prevent seeing pop-up scams, you should visit only reputable websites. Torrent, Crack, free online movie streaming, YouTube video download, and other websites of similar reputation commonly redirect Internet users to pop-up scams.

To minimize the risk of encountering pop-up scams, you should keep your Internet browsers up-to-date and use reputable anti-malware application. For this purpose, we recommend Combo Cleaner Antivirus for Windows.

What to do if you fell for a pop-up scam?

This depends on the type of scam that you fell for. Most commonly, pop-up scams try to trick users into sending money, giving away personal information, or giving access to one's device.

• If you sent money to scammers: You should contact your financial institution and explain that you were scammed. If informed promptly, there's a chance to get your money back.
• If you gave away your personal information: You should change your passwords and enable two-factor authentication in all online services that you use. Visit Federal Trade Commission to report identity theft and get personalized recovery steps.
• If you let scammers connect to your device: You should scan your computer with reputable anti-malware (we recommend Combo Cleaner Antivirus for Windows) - cyber criminals could have planted trojans, keyloggers, and other malware, don't use your computer until removing possible threats.
• Help other Internet users: report Internet scams to Federal Trade Commission.

Frequently Asked Questions (FAQ)

What is a crypto scam?

A crypto scam is a fraudulent scheme or deceptive practice in the cryptocurrency space designed to trick individuals into performing certain actions. Common crypto scams include fake token sales or initial coin offerings (ICOs) and fraudulent giveaways.

What is the purpose of a crypto scam?

Scammers aim to trick people into providing sensitive information, transferring cryptocurrency, or participating in fake investment opportunities. The ultimate goal is to obtain funds from unsuspecting victims.

How crypto scams are promoted?

Crypto scams are promoted through various deceptive methods, including phishing emails, fake social media profiles, and misleading advertisements. Scammers exploit online platforms and human vulnerabilities to spread misinformation and lure individuals.

Will Combo Cleaner protect me from scams?

Combo Cleaner is crafted to thoroughly scan each website you visit, effectively identifying and detecting malicious ones. This includes websites designed to deploy scams, ensuring that you receive immediate warnings and restricting access to such potentially harmful sites.

▼ Show Discussion