加密货币交易所诈骗的特征
Characterizing Cryptocurrency Exchange Scams
摘要：
作为生态系统中不可或缺的交易平台，数百家加密货币交易所正在涌现，以促进数字资产的交易。同时，它也吸引了攻击者的注意力。据报道，一些针对加密货币交易所的诈骗攻击导致了巨大的经济损失。然而，在我们的研究界还没有以前的工作系统地研究这个问题。在本文中，我们首次尝试识别和描述加密货币交易所骗局。我们首先通过收集现有的报告和使用错别字生成技术来识别1，500多个诈骗域名和300多个虚假应用程序。然后，我们调查了它们之间的关系，并确定了94个诈骗域名家族和30个虚假应用程序家族。我们进一步描述了这些骗局的影响，并揭示了这些骗局至少造成了52万美元的经济损失。我们进一步观察到，假冒应用程序已被偷偷带到主要应用程序市场（包括Google Play），以感染不可疑的用户。我们的研究结果证明了识别和预防加密货币交易所骗局的紧迫性。为了方便未来的研究，我们已经向社区公开了所有已识别的诈骗域名和虚假应用程序。
英文摘要：
As the indispensable trading platforms of the ecosystem, hundreds of cryptocurrency exchanges are emerging to facilitate the trading of digital assets. While, it also attracts the attentions of attackers. A number of scam attacks were reported targeting cryptocurrency exchanges, leading to a huge mount of financial loss. However, no previous work in our research community has systematically studied this problem. In this paper, we make the first effort to identify and characterize the cryptocurrency exchange scams. We first identify over 1,500 scam domains and over 300 fake apps, by collecting existing reports and using typosquatting generation techniques. Then we investigate the relationship between them, and identify 94 scam domain families and 30 fake app families. We further characterize the impacts of such scams, and reveal that these scams have incurred financial loss of 520k US dollars at least. We further observe that the fake apps have been sneaked to major app markets (including Google Play) to infect unsuspicious users. Our findings demonstrate the urgency to identify and prevent cryptocurrency exchange scams. To facilitate future research, we have publicly released all the identified scam domains and fake apps to the community.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
