Canadian Scammer Steals 4.5M+ from 17+ SIM Swaps

ZachXbt posted today about a Canadian guy stealing upwards of 4.5M from entities like Bitboy, Aptos, and GutterCatGang via SIM Swap.

SIM Swaps work by impersonating the victim through their mobile service provider. In this case it appears to be a form of spear phishing attacks targeting known entities with significant crypto holdings. The attacker gains control by finding personal information about the victim and convincing the cell phone provider to swap to another SIM card.

Here's the full thread - https://twitter.com/zachxbt/status/1717176615300472964

A look inside 0x7da33a98247b584b0070355881be9085126b53e1. The wallets appears to be funded by a known wallet drainer - Pink Drainer using SaSS (Scamming as a Service).

Scammers Wallet Address-

• 0x7da33a98247b584b0070355881be9085126b53e1 - doxxed on thread
• 0x10FC52deAFe2A7a8203973D2C53F4273566eb49d - Main wallet where most funds were sent
• 0xDaaA684db0dDceacdeA3A1C026d75087E3109B43 - Intermediary wallet

A look inside the highest txns for 0x10FC52deAFe2A7a8203973D2C53F4273566eb49d

It looks like most of the funds were sent to eXch.cx Deposit Addresses, presumably to swap to Monero to cover their tracks.

Image from ZachXBT: Shows connection of the scammer using the same wallet address for the panel scam and SIM swaps from the scammers wallets of 0x7da33a98247b584b0070355881be9085126b53e1 and 0x10FC52deAFe2A7a8203973D2C53F4273566eb49d

This is a friendly reminder on how easy it is to gain access to your wallets from your cell phone and to use 2FA through authenticator app at all times.

​

​