Cybercriminals use Telegram bot BloodOTPbot to hack crypto wallets
The attackers convince the victim to give them a two-factor identification code to gain access to the account
17.02.2022 - 13:10
1744
1 min
0
What’s new? The hackers have found a new way to gain access to users’ cryptocurrency wallets, according to the cybersecurity agency Intel471. They have started using the BloodOTPbot bot to make calls on Telegram. The scammers use the bot at the last stage of wallet hacking: they make calls using BloodOTPbot, posing as a cryptocurrency company whose services a person uses. The attackers convince the victim to give them a two-factor identification code to gain access to the wallet.
Information on the Intel471 blog
What does the agency say? Intel471 highlights that the BloodOTPbot malware bot has been popular with hackers before. They attribute this to the fact that the bot is fairly cheap and easy to use, it costs as little as $300 per month. This allows scammers to save money and buy more malware, which makes it easier for them to gather data about a future victim beforehand.
What else do hackers use? For between $20 and $100, the bot sellers provide phishing tools that target Instagram, Twitter, and Facebook user accounts. These tools are suitable for accessing personal accounts on financial and cryptocurrency platforms. To solve problems with bots on Telegram, the AmaZix blockchain company has opened up access to its “bot moderator.” This procedure will help get rid of cryptocurrency hackers in the messenger.
Useful material?
Incidents
In a single week, hackers went after PHP websites, the Railway cloud platform and a medical company, and experts started talking about a crisis that is only just beginning.
Oct 28, 2026
Incidents
In 104 minutes, the attacker emptied 1,404 addresses before validators halted the network and froze almost all of the loot.
Oct 19, 2026
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Telegram
Twitter