ReporterRJ

Reporting Operations Lead at ChainPatrol

[Umar @umariomaker]

In SF this week for TechCrunch Disrupt! 🌉

AI has made launching convincing brand impersonation practically instant, while manual takedowns still take days.

If you're at Disrupt and want to chat automated brand protection and real-time threat blocking, send me a DM!

[ChainPatrol @ChainPatrol]

As one of the most trusted wallet-cleanup utilities in the Solana ecosystem, @solincinerator has built a passionate, security-minded user base that relies on them daily, and we are proud to safeguard their community from evolving brand impersonations.

Together, we've blocked 287 threats. The largest share (54%) were counterfeit websites and fake dApp URLs, plus spoofed X profiles, fraudulent wallet addresses, scam Telegram groups, and unauthorized listings spanning Zora, Medium, etc.

[ChainPatrol @ChainPatrol]

Together with @PythNetwork we've blocked over 1,500 threats. More than half of them right here on X.

As Pyth builds access to a wide array of market data, we’re proud to help protect the next wave of finance.

[ChainPatrol @ChainPatrol]

We Protect Everyone @token2049

[ChainPatrol @ChainPatrol]

Thanks to @wrappedxyz for putting together another successful Multichain Day, bringing builders and innovators together under one roof.

We were excited to moderate a talk on the future of agentic AI in on-chain payments and the security guardrails needed to make a faster, safer future possible with:

@Cindyshi0907 from @GoKiteAI
@francescoswiss from @MetaMask
@glennonchain from @_quakeai
@proofofjamal from @solana

[ChainPatrol @ChainPatrol]

It's good to be back @token2049

[Umar @umariomaker]

@BSidesTO is one of my favorite local security conferences. The defensive research and community discussions here are always top-tier.

Baris, Nicole, and I will be at the conference over the next two days. If you are tracking phishing kits, credential abuse, or platform security, let’s chat.

[ChainPatrol @ChainPatrol]

The ChainPatrol team is heading to @token2049 in Singapore. Our COO and co-founder Vito Giovannetti is speaking on the Agentic Payments panel at @wrappedxyz's event on October 6. If you're there, come say hi! 😎🛡️

[Umar @umariomaker]

Back at Remix Jam in Toronto today! 🇨🇦

Best rooms are always the ones full of people who care about routing, web standards, and shipping fast.

If you're building on Remix, come find me. Happy to talk frameworks, real-time security, or anything in between.

[Nikita Varabei @NikitaVarabei]

Some scam sites never mention the brand name they're copying.

No imitation in the domain text or on the page. Just your icon in the browser tab, known as a favicon.

We now flag these fake domains by the favicon itself.

[ChainPatrol @ChainPatrol]

As a high-throughput Layer 1 blockchain built for global adoption, @SuiNetwork has a fast-growing ecosystem of builders, creators, and DeFi users, and we are proud to protect their community from impersonation and phishing threats across the web.

Together, we've blocked 3,023 threats. The largest share (50%) were web domains and URLs, plus 23% on Twitter / X, 7% on Medium, 6% on Telegram, 5% on YouTube, 3% malicious on-chain addresses, and 5% across other platforms.

[Nikita Varabei @NikitaVarabei]

Scammers pay for ad space on Facebook to push a fake "wallet security update" or notify users of a “mandatory migration.”

495 of these have been taken down in the past week for just one of our clients.

It might look legitimate, but no ad, or update requires your recovery phrase.

[ChainPatrol @ChainPatrol]

Legitimate companies will never ask you to run unverified scripts or open password-protected zip files for a job interview.

Threat actors routinely impersonate recruiters, executives, and team members to target developers and talent with malware. Protecting your organization means detecting and taking down fake recruiter profiles and impersonating accounts before scammers weaponize your company's reputation.

[Nikita Varabei @NikitaVarabei]

We recently saw a very convincing scam impersonating the RCMP.

You get a call claiming your name was found on the device of an arrested criminal, and that your credentials are likely at risk.

A professional sounding agent calms you down, and says that first they will send you a confirmation email to prove their identity.

This of course comes from a fake domain, not the official site itself.

The combination of being hit across multiple channels is what get's many people, bypassing the initial wave of suspicion.

Your personal information is precious, and examples like this are exactly why it needs to be protected

[ChainPatrol @ChainPatrol]

With Cybersecurity Awareness Month right around the corner, here is a question every security team should be asking:

If a threat actor cloned your website or created a fake executive profile right now, how long would it take for your team to find out?

For many organizations, the answer is: when a customer reports they lost money.

Traditional security tools monitor what enters and leaves internal networks. But impersonation happens out in the open: on search engines, newly registered domains, mobile app stores, and messaging apps.

Real security readiness means finding and removing external threats before they turn into customer support crises.

[ChainPatrol @ChainPatrol]

That free Claude Max offer isn't real, and that Google login window isn't either.

Scammers are using a fake "10,000 free months of Claude Max" giveaway to lure users into a Browser-in-the-Browser trap. Every path forces a popup drawn directly onto the page, complete with a fake address bar and padlock to harvest Google credentials.

Here is how the campaign works 👇

[ChainPatrol @ChainPatrol]

Over 49,000 gamers searching for @FACEIT are exposed to malicious impersonations every month.

We mapped an active network across 8 platforms, identifying 22 distinct threats:

- Fake "Go Verify Yourself" portals designed to steal account credentials
- Cloned support profiles intercepting players looking for help
- Fraudulent skin giveaways baiting clicks on social feeds

Here is what our team uncovered 👇

[Nikita Varabei @NikitaVarabei]

Don't call a support number just because it showed up first in a Google search.

We tracked a scam campaign that got fake hotline numbers ranking on page one using 1000s of throwaway videos all stuffed with phrases like “24/7 Support” and “Account Recovery” to game Google’s SEO.

We took down 1,500+ of these fake videos just in the last week.

[ChainPatrol @ChainPatrol]

Purpose-built for the future of gaming, @Ronin_Network has a thriving, highly active global player community, and we are proud to protect their players, developers, and ecosystem assets 24/7.

Together, we've blocked 435 threats. The largest share (42%) were malicious web domains and phishing URLs, plus widespread impersonation attacks across Telegram, X, on-chain drainer addresses, and Meta platforms.

[ChainPatrol @ChainPatrol]

Yeah, we do that 😎