How a Twitter account has taken advantage of OmiseGo Airdrop announcement to phish for OmiseGo investors private details and steal Ethereum.
OmiseGo, the e-wallet platform created by Omise, is set to launch its Airdrop in the last quarter of 2017. Omise released an announcement for an automatic airdrop of tokens beginning on Monday, Sept. 4.
OmiseGo Airdop excitement opened up phishing opportunity
The Airdrop is said to take a week before it finishes, or may take a little more time depending on the Ethereum status and bulk of traffic. A 0.1 minimum threshold is set to be received by individuals, the said threshold can be more, however, and shall be proportionate to their Ethereum shares.
The official statement from OmiseGo verified that there will be 450,000 addresses that shall receive OMG as a result of the airdrop. With the vast size of the Ethereum community, the amount of OMG that the majority will receive will just a tiny portion.
The said, Airdrop is the firm’s move to show appreciation for everyone who supported their community. Moving forward, the OmiseGo is expecting to grow the OMG and Ethereum communities together.
$OMG airdrop update 3 https://t.co/IckKbSGoxf #OmiseGo #Plasma #Ethereum
— OmiseGO (@omise_go) September 4, 2017
With the excitement stirred from the said announcement, a window opportunity to trick Omise investors has been created for @omise_com, which impersonates the official account @Omise_Go.
The impersonating account mimics the very same messaging from the OmiseGo’s official announcement and tricks people into giving out their private keys, and steals their Ethereum.
Fake account impersonating OmiseGo on Twitter
According to users who were victimized by the fake OmiseGo Airdrop, they were asked to enter their private key. Once a private key is submitted, the screen will blink and clear all the fields to original forms. There is no confirmation message sent.
They’re trying to get your private keys to claim your $OMG from the airdrop. #SCAM $ETH $BTC #crypto @omise_go @JUN_Omise
— NAPOLEON CRYPTOMITE (@NapoleonCrypto) September 9, 2017
Some Ethereum account holders complained via Twitter about the scheme.
OmiseGo has cautioned that account holders should not believe any announcement from bogus sites or accounts, but no other actions are currently being taken by the company to help prevent any further damage as a result of the impersonation.
Don’t believe sites/links telling you to do something for $OMG airdrop or you will get scammed. There is nothing to do. Just wait. #OmiseGo
— OmiseGO (@omise_go) August 13, 2017
As of press time, the address where the stolen Ethereum are sent to has amassed a total of $32,957.29 (@ $301.48/ETH) with no signs of slowing down.
We are yet to receive an answer from our request for comment through email and Twitter on what steps OmiseGo have taken to help prevent such activities causing any further havoc to its investors.