GoPlusSecurity: Users lost approximately $100,000 due to address poisoning attacks

GoPlusSecurity reported that a user lost approximately US$ 100,000 in USDT due to address poisoning attacks. After the transfer 69 days ago, the victim received more than 400 poisoning transactions. By sending small transactions, the assailant disguises the victim ' s intention to receive the address from a malicious address, usually matching several characters, waiting for the user to copy the paste. Such attacks are now fully automated, ranging from the identification of targets, the generation of similar addresses to the deployment of counterfeit coins, the sending of dust transactions and the laundering of money through hybrids. The victim ' s address was 0x9b4d0ab775428f7ec0f63a42bae70d2f51d83, intended to receive 0xae7c0ffab6e77b2d7d7880a4ce433f59a4e2c85, poisoning address 0xae7c08fad91db1866eeac055d7562c9f4e2c85. Security: • Do not copy the address from the transaction history. • Verify the entire address, not just the back and forth characters. • Sending a small test transaction prior to the transfer of large funds。