Users of Solana (SOL) are notified by Ledger, a cryptocurrency wallet provider, of an important development that may jeopardise the security of their accounts.
Ledger alerts Solana users to a persistent phishing and address-poisoning fraud via a tweet.
https://x.com/Ledger_Support/status/1722250595791450317?s=20
A new kind of fraud that preys on bitcoin users is called address poisoning. In this scam, the attacker “poisons” the target’s account by sending a little amount of cryptocurrency—in this example, SOL—or occasionally an NFT that is passed off as a voucher.
Because the fraudster’s address may be customised to resemble the target’s, in certain instances the scammer may even make it seem as though the user started a “Send” transaction.
The ultimate goal is still to fool the user into sending money to the scammer’s address instead of a real one by accidently duplicating theirs.
In light of this, Ledger alerts customers to the possibility of malware in dust SOL transactions, thus they advise against clicking on any links in the memo associated with the transaction. Additionally, it is suggested that they keep their 24-word recovery phrase to themselves.
When receiving dust SOL tokens, users have to refrain from dealing with the unwanted tokens. As doing so might trigger the fraudulent smart contract linked to the tokens, they shouldn’t try to move or send the undesirable tokens to another account or burn address.
Rather, right-click on the token balance and choose Hide Token from the menu to remove it from view.
Address-poisoning cannot be avoided, however it may be easily avoided by sending and receiving cryptocurrencies in accordance with standard practises. It is not advisable for users to just take the destination and deposit addresses from the transaction history.
