Phishing Attack Targets ChangeNOW User, Losses Exceed $20,000 – Coincu

User lost over $20,000 on the ChangeNOW platform. Punycode spoofing tricked the user. Incident underscores ongoing phishing challenges. A cryptocurrency user lost more than $20,000 after visiting a phishing site mimicking ChangeNOW. This incident highlights vulnerabilities in domain name spoofing, affecting user security in cryptocurrency transactions. Phishing Attack Causes $20,000 Loss to ChangeNOW User On an unspecified date, SlowMist founder Yu Xian highlighted a phishing incident involving a user on the ChangeNOW exchange. The attacker employed Punycode technology to mimic the authentic website , leading the user to suffer a significant financial loss exceeding $20,000 . Punycode phishing involves tweaking domain names with visually similar characters. In this case, a Chrome browser auto-recommendation misled the victim. Such sophistication underscores the ongoing risks within the crypto landscape, prompting calls for increased cybersecurity measures . SlowMist’s Yu Xian regularly addresses such threats, urging enhanced vigilance against growing crypto-targeted cyber threats: “Almost every victim corresponds to a different attacker address , indicating that the attackers had long planned this incident, with gas sources exchanged through XMR three days ago.” Community responses remain sparse, with no formal warnings from ChangeNOW or regulatory bodies. Punycode Threat and Potential Cybersecurity Measures Did you know? Punycode phishing has been a persistent threat in the online realm, tracing back to the browser-use of Unicode in domain names to trick users since 2017. According to CoinMarketCap, Ethereum (ETH) is currently priced at $2,543.16 with a market cap of $307.04 billion . Despite challenges and a daily trade volume of $34.36 billion , ETH’s value has increased by 8.89% in the past day , demonstrating market resilience. Ethereum(ETH), daily chart, screenshot on CoinMarketCap at 03:20 UTC on May 11, 2025. Source: CoinMarketCap Coincu researchers indicate potential regulatory focus following such incidents. They highlight that enhanced digital monitoring and stricter domain validation could mitigate phishing risks . Blockchain firms might explore new security integrations to defend against these evolving threats. Source: https://coincu.com/336924-phishing-change-now-user-loss/