cryptobriefing.com Phishing Scam Targets Trust Wallet Users via Lookalike Domain
Article Content
- •The phishing site trastwallet.cam closely resembles the legitimate Trust Wallet domain.
- •Users are tricked into connecting their wallets, allowing the site to scan balances.
- •No confirmed losses have been reported, but similar scams have led to significant thefts.
A phishing site at trastwallet.cam has been identified, mimicking Trust Wallet to steal user assets. Users are prompted to connect their wallets under the guise of reviewing transfers, allowing the site to scan wallet balances and prepare unauthorized transfers. The scam supports connections from Trust Wallet, Phantom, and OKX wallets. At the time of reporting, actual transaction signing was disabled, preventing immediate theft. No confirmed losses have been reported, but similar phishing campaigns have previously resulted in significant thefts. The site is part of a broader campaign targeting Trust Wallet users, with at least nine suspicious domains documented. Security experts recommend checking URLs carefully, avoiding connections to unofficial platforms, and never sharing seed phrases. The phishing campaign follows a warning from Zürich police about phishing emails related to Trust Wallet issued on October 30, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track OKX in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What wallets are affected by this phishing scam?
What should users do to protect themselves?
Have there been any reported losses from this phishing site?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
Chinese Actor Compromises US Government Networks via PHP2Shell Exploit A suspected Chinese nation-state actor exploited vulnerabilities in Palo Alto Networks firewalls using a chained PHP2Shell exploit and a Linux kernel privilege escalation flaw. The attack, which began on October 23, targeted 25 servers across the US, Japan, Taiwan, and South Korea, with a focus on US…