{“lastseen”:”2025-10-07T18:43:41″,”description”:”Phishers and scammers can\u2019t get enough of sending their feeble attempts to Malwarebytes\u2019 employees. For which we can\u2019t thank them enough because it means we can warn you, our readers.\\n\\nThis time the scammers tried to impersonate Best Wallet\u2014an app that lets people store, send, and receive cryptocurrencies like Bitcoin and Ethereum directly on their own device, without needing a middleman or a bank. \\n\\n**The aim of this scam** : to trick people into connecting their cryptocurrency wallets to a fake site, giving scammers a way to steal private keys, seed phrases, or other payment details.\\n\\nThere are many cryptocurrency-based scams around, but this one is a little different.\\n\\n\\n\\n\\u003e \u201cBestWallet : You are eligible for our event !\u201d\\n\\nThe shortened URL leads to `https:\/\/bestwallet-event[.]com\/`.\\n\\nTo avoid detection by bots and researchers, the website is behind a Captcha\u2014which also builds a bit of false trust, since it’s something visitors expect to see.\\n\\n\\n\\nSolving the Captcha brings the target to a rather convincing copy of the real bestwallet(.com) website, featuring the so-called event.\\n\\n\\n\\nFor those new to cryptocurrencies, an \\”airdrop\\” is a giveaway of a new or existing cryptocurrency to promote awareness or reward supporters of a project or platform.\\n\\nOn the surface the site looks very similar to the legitimate one, right down to the branding, visual assets, and even the FAQ content. But one thing stood out: the \u201cConnect a Wallet\u201d button in the top right-hand corner. \\n\\nThe real site only provides links to official app stores for downloads. It doesn’t include wallet connect options or payment forms.\\n\\nIf you were to tap that \u201cConnect a Wallet\u201d button, you\u2019ll see these options:\\n\\n\\n\\nThis is the same menu you\u2019ll see if you click the \u201cClaim Token\u201d or \u201cCheck Eligibility\u201d buttons, by the way.\\n\\nThe code on the fake website also includes JavaScript elements that could copy\/paste or intercept user inputs during wallet connections or transactions\u2014unlike the official site, which directs users to app stores for all sensitive actions.\\n\\n\\n\\nFrom all this it seems obvious the scammers’ goal is to phish wallet credentials, private keys, seed phrases or steal payment details. These attacks are often disguised in interactive buttons\/forms that the real site never uses outside the regulated app or store environments.\\n\\n## How to stay safe\\n\\nBesides the golden rule\u2013that when it sounds too good to be true, it probably is, or at least deserves extra scrutiny\u2013there are a few other tips to stay out of the scammers’ claws:\\n\\n * Don’t respond to unsolicited text messages.\\n * Never click on links in messages before verifying the destination. Scammers use shortened URLs to hide impersonation domains.\\n * Use up-to-date real-time protection on your devices, preferably with a web protection component: \\n\\n * If you see any prompt for wallet connection, seed phrase, or card details directly in the browser, close the tab immediately. That’s a strong sign the site is fake and attempting to steal your cryptocurrency.\\n * If you\u2019re unsure whether a message is a scam, submit it to Malwarebytes Scam Guard and it will help you decide and provide advice.\\n\\n\\n\\n* * *\\n\\n**We don ‘t just report on scams\u2014we help detect them**\\n\\nCybersecurity risks should never spread beyond a headline. If something looks dodgy to you, check if it’s a scam using Malwarebytes Scam Guard, a feature of our mobile protection products. Submit a screenshot, paste suspicious content, or share a text or phone number, and we\u2019ll tell you if it’s a scam or legit. Download Malwarebytes Mobile Security for iOS or Android and try it today!”,”published”:”2025-10-07T15:58:17″,”modified”:”2025-10-07T15:58:17″,”type”:”malwarebytes”,”title”:”Don\u2019t connect your wallet: Best Wallet cryptocurrency scam is making the rounds”,”source”:””,”references”:””,”id”:”MALWAREBYTES:AED336B90CF232D6BB595A56784899C2″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2025\/10\/dont-connect-your-wallet-best-wallet-cryptocurrency-scam-is-making-the-rounds”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-07T18:43:41″,”description”:”Phishers and scammers can\u2019t get enough of sending their feeble attempts to Malwarebytes\u2019 employees. For which we can\u2019t thank them enough because it means we…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-20562","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n