Scam targeting Bulgarian users of crypto

By SpamReports | SpamReports | 28 Jan 2021

Fake money laundering scam imitating NRA Bulgaria

Steals seed phrase, masked as NRA money laundering check. Badly google translated text.

naak[.]website

naak[.]online

IoCs

176.10.202.129

155.133.93.30

31.5.167.149

62.201.235.58

93.103.166.70

37.75.40.16

130.204.46.41

109.120.214.195

5.56.73.146

41.218.93.25

190.218.34.220

Scam email

НААК Cryptopro Technology

Забранена транзакция, пране на пари. Портфейлът ви е получил транзакция, маркирани които борси са измама.

Time: 2021-01-25 14:44:56 GMT IP Address: 45.134.240.0 Browser: Opera 87 Operating System: Lunix Следвайте указанията по-долу.

Проверете транзакцията. Да уточним - ако установите, че сметката Ви е ограничена, това не означава, че подозираме Ваше участие в пране на пари или други незаконни дейности.

Resources

https://spamreports.report/post/641533399649140736/scam-targeting-bulgarian-users-of-crypto-steals

Cryptocurrency Bitcoin (BTC) Scam cybercrime phishing

How do you rate this article?

SpamReports

Providing public exposure to phishing, spam and scam fraud campaigns

SpamReports

Hi, thanks for stopping by!🙋 I am a phishing hunter. My goal is to proactively monitor for and report fraudulent content off all types as fast as possible to the relevant entities, in order to circumvent the cyber criminal threat actors and stop them in their tracks! I focus primarily on: 🎯 Phishing - this is my top priority! 💸Financial fraud 💳Identity theft 🎣Cyber crime ☣Malware My reports reach: ➡The affected companies / organizations being targeted; ➡The affected companies, who provide service

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.