Hello and welcome to the Thursday, May 22nd, 2025 edition of the Sands Internet Storm Centers.

Stormcast, my name is Johannes Ulrich, and in this episode brought you by the sands.edu credit

certificate program in cybersecurity engineering. I am recording in Jacksonville, Florida. Well, remember a few weeks ago,

we had these scammers that actually left comments on the Inlet Storm Center YouTube channel

that listed their private passphrase for their crypto coin wallets. And well, we looked into this,

and the reason they did this was not to give you the money.

Kind of that would have been too easy and not much of a scam, but instead, the way these

crypto wallets were set up, they needed a second passphrase in order to actually work and

for you to be able to deduct money from them.

So they try to trick you into actually sending the money for the transaction fee ahead

of realizing that you can't actually get to the money.

Well, it looks like we have a little bit an evolution of this scam happening.

Now, I've observed it on X where via direct message.

Someone approached me and told me that, hey, you actually got some money from me coming here.

And then they gave me the username and password to actually log into their account.

And these credentials work on this very specific website.

The problem, of course, with this is that, well, it's not so easy to actually get to the money from that website.

This website, I'm not familiar with it.

I doubt it's legit, but it doesn't really look all that confidence building.

Once you're trying to actually then withdraw the money from the account,

you're prompted with, well, the next challenge that in order

to actually withdraw the money, you need to know a key password. And of course, you don't have

...