Blog

AAVE users that are targeted by Google Ads Phishing Scam after $ 60b Milestone


Shortly after the decentralized liquor protocol Aave Aave announced that it exceeded $ 60 billion in net deposits, scammers launched a phishing campaign targeting its users via Google ADS, according to security researchers.

On Wednesday, Aave said it was the first Decentralized Finance (Defi) Protocol to accumulate $ 60 billion in net deposits throughout 14 networks. According to According to token terminal data, AAVE’s net deposit has been more than triple last year from nearly $ 18 billion in August 2024.

One day later, on Thursday, the blockchain investigation firm Peckshield alerted the crypto community to an ongoing phishing attack targeting AAVE (Ghost) investing. Scammers have posted phishing links on AAVE’s fake investment platforms through the Google Ads service.

AAVE net deposits in all chains. Source: token terminal

Phishing scam spreads through ads

When an undeniable crypto investor clicks on the links, the website will motivate them to llink their crypto wallets into its services.

Source: Peckshield

Linking a purse address to the Phishing website will allow scammers to access and transfer all funds stored in the purse. Such transactions are often irreversible and may result in permanent loss of funds.

While losses from the ongoing attacks are not confirmed, the reach of the phishing attempt is high, as it is propagated by Google Ads services.

Related: A proposal to launch centralized lending on Kraken’s ink in the next stage

Avoiding the loss of phishing scam funds

Phishing scam users are cheating on revealing sensitive information, such as private keys, seed phrases or logging credentials, by pretending to be trusted or well -known services.

Investors are advised to double-check website URLs before contact, including depositing funds and linking wallets. In the case of a compromise, investors should take specific steps to help reduce damage.

Crypto investors should immediately try to transfer funds from the compromised purse to a safe. They should also reach their service provider through official channels and withdraw any purse approved through services such as Revoke.Cash.

In addition, compromised wallets should not be reused to store or deposit funds, as scammers usually monitor the wallets and try to cash out any remaining funds. Users should also try to disconnect their purses from phishing websites.

Cointelegraph contacted the AAVE for comment and alerted them to the ongoing phishing attempt.

Magazine: How Ethereum Treasury Companies can spark ‘Defi Summer 2.0’