Research into Trust-Trading Scams on Twitter

Over 300 Twitter accounts are trying to steal your money.

Harry
Harry
Aug 13, 2019 · 6 min read

Motivation and Purpose

Image for post
Image for post
An example of one of the tweets — replying to a cryptocurrency entity quoting a tweet [See Research]

Analysis of users

Image for post
Image for post
A graph detailing the percentage of Twitter accounts from our data set created by year [See Research]
Image for post
Image for post
Graphs detailing the percentage of Twitter accounts from our data set created by month (in 2019) with a correlation of cryptocurrency prices [See Research] [See Research] [See Research]
Image for post
Image for post
A graph detailing the number of tweets sent out by the Twitter accounts from our data set [See Research]
Image for post
Image for post
A chart detailing the different input masks for the Twitter accounts promoting the scams [See Research]
Image for post
Image for post
A graph detailing the recovery options for the Twitter accounts [See Research]

Analysis of tweets

Image for post
Image for post
A chart showing common sha256sums of tweeted images [See Research]
Image for post
Image for post
A copy of Twitter image EA0o-xHUcAA-gEa.png with sha256sum of f3d02…57a542 [See Research]
Image for post
Image for post
A graph showing who “authored” the fake tweets according to the photoshopped images [See Research]

Analysis of infrastructure

www.crypto-drop.org
www.now5000.com
www.coinbase-team.com
20eth.com
www.giftbinance.com
www.binancefunds.com
www.ethereum4th.com
www.coinbase-promo.com
www.drop-crypto.com
btc.wz.sk
www.binclic.com
www.ethereumpromo.epizy.com
www.coinbasetop.com
bit.do/binance5000
www.coinbase.gift
www.airdrop2.com
www.promobinance.net
bit.ly/binancegive
bit.do/binancebtc
www.coinbase.promo
www.bit.do/binance10x
www.5000bitcoin.net
www.2019giveaway.com
www.gift-binance.com
www.5000giveaway.com
www.coinbase5000.com
5000promo.net
mybinance.net
www.bit.do/promo10x
www.drop-binance.com
www.2019airdrop.com
cryp.li/mSty0q8
www.binance5000.info
www.bit.do/10xpromo
www.5000btc.org
www.win-binance.com
bigpromo.net
www.coinbasepromo.epizy.com
www.coinbasepromo.net
www.top-binance.com
www.bit.do/coinbasepromo
www.promo5000.com
www.eventbinance.com
www.bit.do/vitalik10x
www.btcfast.net
www.5000btc.gift
promo-binance.netlify.com
www.coinbasegift.net
www.ethereum4th.org
www.promotion-crypto.com
www.airdrop-crypto.com
muskelon.net
Image for post
Image for post
A geographical chart detailing where the servers are located that hosted the malicious trust-trading kits [See Research]
Image for post
Image for post
A graph detailing which month (in 2019) the domains were registered

Analysis of cryptocurrency addresses

Conclusions

Look at the data yourself


MyCrypto

The Official MyCrypto Blog

Welcome to a place where words matter. On Medium, smart voices and original ideas take center stage - with no ads in sight. Watch

Follow all the topics you care about, and we’ll deliver the best stories for you to your homepage and inbox. Explore

Get unlimited access to the best stories on Medium — and support writers while you’re at it. Just $5/month. Upgrade

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store