🚨SlowMist Security Alert🚨 A user lost over $20K after visiting a fake @ChangeNOW_io site. 📌Notice the letter “e” in Pic 1? It’s a #Punycode# attack — a trick we’ve covered in the blockchain dark forest selfguard handbook(Pic 2). ⚠️Beware of browser recommendations — they may suggest phishing sites. Always verify URLs from multiple sources. Here’s a simple way to find the correct official site: 1️⃣ X Verification Users often rely on the website link shown in a project’s official X account. But don’t trust it blindly — always check the account’s follower count, verification badge, and registration date.⚠️These can be faked. So don’t stop here — proceed to cross-verify. 2️⃣ Cross-Verification Use trusted platforms like @DefiLlama, @coingecko, or @CoinMarketCap to confirm the domain matches the one on X. 3️⃣ Bookmark It 🛡️For more attack patterns and security tips, check out the blockchain dark forest selfguard handbook: https://t.co/v6lrUYgrI9 Stay vigilant! #Phishing# #CryptoSecurity# #Web3#

吴说获悉，慢雾余弦发推表示，一位加密货币用户在使用 Chrome 浏览器访问 ChangeNOW 交易所时，因点击浏览器自动推荐的钓鱼网站导致资产被盗。该钓鱼网站使用 Punycode 技术伪造域名（字母「e」存在异常），用户误认后损失超过 2 万美元。https://t.co/ol3BmKZL7O

⚠️一位玩家发来的截图，不过他相信 Chrome，点击“是的，继续”，然后进入了假冒 @ChangeNOW_io 的钓鱼网站（注意截图里的字母 e，在黑手册我提过 Punycode 这种钓鱼方式），然后被盗 2 万多刀资产... 这就是 Chrome 的坑了，推荐机制没做好，给用户推荐了钓鱼网站...用户本来是访问真网站的...😭 https://t.co/2oZHRsKMRp