- Susbarium identifies phishing domain mimicking official Shiba Inu platforms closely.
- Fraudulent site automatically drains wallets once users connect to the interface.
- Security team advises verifying URLs and using revoke.cash for token approvals.
The Shiba Inu security alert channel Susbarium has issued a warning about a phishing attack targeting community members. The scam involves a fake website designed to steal funds from token holders who connect their wallets.
Susbarium, also known as Shibarium Trustwatch, identified the malicious domain as https://app-shib-io.pages.dev/snapshot. The fraudulent site has been created to closely resemble official Shiba Inu platforms, including ShibaSwap and Shib.io. Users who connect their wallets to this domain risk having their assets drained without additional authorization.
Official platform remains only verified hub
The security team stressed that Shib.io serves as the sole legitimate platform for the Shiba Inu ecosystem. Community members and ecosystem developers have verified this portal as the official hub for all related activities.
The Shib.io platform provides access to ecosystem tokens such as SHIB, BONE, LEASH, and TREAT. It also hosts ShibaSwap and other authorized initiatives connected to the project. Users should only interact with this verified platform when conducting transactions or engaging with ecosystem features.
Susbarium has reported multiple scam attempts targeting the Shiba Inu community over recent years. Fraudsters have impersonated official administrators and moderators across various social media channels. In 2023, scammers promoted a fake token giveaway using an account that mimicked lead developer Shytoshi Kusama on X.
Security team outlines protection measures
The alert channel warned about fake accounts impersonating developers on Telegram in June 2024. Earlier this year, Susbarium also identified multiple counterfeit ShibaSwap websites created to drain user assets through similar wallet connection schemes.
The security team has provided specific recommendations to protect against these attacks. Users should avoid connecting wallets to unverified or suspicious platforms. Scammers frequently deploy lookalike domain names, making it critical to examine URLs carefully before clicking any links.
Community members who have already interacted with suspicious sites should use revoke.cash to immediately cancel token approvals and permissions. This tool allows users to revoke access granted to potentially malicious contracts.
Susbarium advises reporting phishing websites to wallet providers and browser security teams. Users should also limit their engagement to official channels on X, Telegram, and Discord. The security team continues to monitor for new threats and will issue alerts as additional scams are identified.
The ongoing phishing attempts highlight the need for vigilance when interacting with cryptocurrency platforms. Verifying website authenticity before connecting wallets remains the primary defense against these attacks.
Source: https://thenewscrypto.com/shiba-inu-security-team-warns-of-fake-website-targeting-shib-holders/
