Security Researcher Tears Up a Binance Scam Site to Find the Hackers

In a six hour trek through an insecure server, security researcher Harry Denley was able to reconstruct – and apparently shut down – a clever phishing attack that is targeting users of the Binance crypto exchange.

​

His Medium post details the activity on a phishing site – logins-binance.com12754825.ml – that collected logins and two-factor codes from confused users. The server presented what looked like a standard Binance login and the user would type in their credentials and then be forced to wait, presumably while the hackers logged in on their side.

​

Luckily the server was wide open and Denley was able to find tools, logs, and even email addresses for the hackers.

​

https://www.coindesk.com/security-researcher-tears-up-a-binance-scam-site-to-find-the-hackers