Changpeng Zhao tweeted on Friday “There is a massive Phishing scam via SMS with a link to cancel withdrawals. It leads to a phishing website to harvest your credential as in the screenshot below. NEVER click on links from SMS!”
The tweet further advised users to save or type the Binance website address into their browser. This way users of Binance might protect their passwords.
Changpeng Zhao's tweet is made up of a screenshot that appears to be in the form of a text message and is directed at Binance users. The source of the text message appears to be from the exchange, but it contains a malicious link.
Users will be sent to a phishing website if they click it. This website will then harvest the user's credentials in order to defraud them of their money.
The picture also showed that the mail will include a withdrawal request from a fictitious IP address. When a user hits the link, it will guide them through a series of procedures that will allow them to cancel the withdrawal request.
Users will be ripped off if they click on the link since the fake website will grab their credentials.
It's unclear if this type of phishing is just aimed at Binance users, but till now, they are the only ones who have been affected. Other platforms are almost certainly on the radar as well. The number of Binance users who fell victim to the recent phishing scam has yet to be reported or revealed.