Beware! Many Binance Android APP transfer addresses have been modified to hacker addresses to precisely implant malicious code

Everything on your "Binance" Android APP is real, you can log in and trade normally, but there is only one thing that is fake: the USDT transfer address. When you want to transfer a sum of USDT to Binance, the money has already been transferred to the hacker's wallet. The reason is that you did not download the APP from the correct official website.

This is not a fantasy, similar incidents have occurred recently. For safety reasons, users are advised to quickly check all your cryptocurrency Android apps involving property, and be sure to delete any that were downloaded from non-official websites.

"Coin Circle Xiao Hu" described the whole process on October 27: On October 24, 2022, I was going to transfer 5 ETH from Fox Wallet to Binance APP for withdrawal. I opened Binance APP (the phone was Huawei Honor), called up the QR code of the payment address (ERC20), scanned the code using Little Fox Wallet (Chrome plug-in for PC), checked the address, and transferred the money. A few minutes later, I checked the Binance APP and found that the money had not arrived. I thought it might be network congestion. After a few hours, it still hadn't arrived, and I was a little suspicious. So I contacted customer service, and the customer service asked me to submit the hash of the transfer. I submitted it, but the customer service said that my recharge address did not belong to any user of Binance.

https://twitter.com/hu94286743/status/1585505751325634560

Another user, kongkong, described: My friend withdrew U from OKEx to Binance. The first payment was received, but the second payment of more than 5,000 U was not received after waiting for more than half an hour. Finally, he contacted Binance App customer service, who said that the trc20 address for receiving U was not the address of the Binance user, and the U could not be retrieved.

https://twitter.com/crptokongkong/status/1585831217681018880

Wu said that his analysis found that according to on-chain data statistics, one of the hacker addresses of the fake Binance APP, TN9L…NUz9, has received more than 500,000 USDT in the past month, with nearly 400 transactions.

https://tronscan.org/#/address/TN9LTR5Yn63ha8undsJgQEKmnx9w9uNUz9/transfers

Binance official replied: 1. It is recommended to visit the official website using Google Incognito mode. 2. When recharging assets, compare the recharge address displayed on the app with the recharge address displayed on the computer web page to see if they are the same. 3. When withdrawing assets, confirm whether the address entered for withdrawal is the same as the address notified by email. 4. After confirming that the address is correct, you can make a small deposit or withdrawal first.

Security experts pointed out that the core reason is that malicious code was precisely implanted into the Binance APP. Binance should require users to re-download the latest APP from the official website, especially Android users. Similar problems are likely to occur to users who download other exchange APPs. Unlike other ways of stealing coins, this method of stealing coins does not require verification such as identity verification devices, SMS, and email. Due to the comprehensive crackdown on related APPs in the Chinese world, it is difficult to download them through traditional channels such as the application market, and it is easy to download fake APPs.

The SlowMist security team explained to Wu Blockchain: After the APP is repackaged, the Binance APP is put on the relevant download site. Once the user installs the fake Binance APP, the fake Binance APP does not change in user login and other functions. The malicious code function is located when the user recharges. When the user switches to recharge, the malicious code rule is triggered, and the user's recharge address is replaced with a malicious address. The SlowMist security team said that it is forbidden to use search engines to find Android APPs. For example, searching for "Binance APP download" on Baidu is basically all fake APPs. Be sure to download the APP on the official website. The common characteristics of the above two users are: downloading APPs through search and using Android phones.