According to phishing tracking service CheckPhish, there has been a rise in the number of phishing pages designed to impersonate high-profile brands.
Five domains have been identified which were trying to disguise themselves as the Blockchain wallet service. Similar bitcoin phishing activity has been reported by others.
— Dmitry Bestuzhev (@dimitribest) December 7, 2017
— x0rz (@x0rz) December 7, 2017
— Fabio Castro (@evilsocketbr) December 9, 2017
— HexaDexs (@HexaDexs) December 6, 2017
Other than Blockchain, Domaindetect.io has reported that the popular Bitcoin exchange called LocalBitcoins is also being targeted.
— DomainDetect.io (@DomainDetect_io) December 6, 2017
There is more. A spam campaign, reported by Fortinet, promotes a fake version of the bot trading tool GunBot in emails. It tries to download files containing Orcus RAT malware on people computers with an intent of stealing their Bitcoin information and emptying the wallet.