Ethereum Activity Surge Linked to Address Poisoning Attacks Following Network Upgrade

Source: CryptoNewsNet Original Title: Ethereum activity surge could be linked to dusting attacks: Researcher Original Link: Recent record network activity on Ethereum could be linked to a wave of address poisoning attacks that are taking advantage of low gas fees since December, said security researcher Andrey Sergeenkov.

Network activity retention nearly doubled to 8 million addresses in a month, while daily transactions hit an all-time high of almost 2.9 million.

The week starting Jan. 12 saw 2.7 million new addresses, 170% higher than typical values, while daily transactions surged to over 2.5 million, said Sergeenkov.

However, Sergeenkov said the uptick could be due to a type of mass spam attack known as “address poisoning,” which has become more economical after the December Fusaka Ethereum network upgrade cut transaction fees.

Network fees fell more than 60% in the weeks that followed the upgrade in early December.

“Address poisoning has become disproportionately attractive for attackers,” said the researcher, adding: “you can’t scale infrastructure without addressing user security first!”

$740,000 Lost in Address Poisoning Attacks

Address poisoning involves scammers sending small transactions from wallet addresses that resemble legitimate ones, duping users into copying the wrong address when making a transaction.

The scammers first send small amounts of money, usually stablecoins, to “dust distributor” addresses.

Sergeenkov said he was able to uncover likely dust distributor addresses by looking at the number of wallets that received less than a dollar as their first stablecoin transaction.

Then, to identify which of these are “dust distributor” addresses, he looked at only those that sent transactions out to more than 10,000 addresses.

“These poisoning addresses then distribute dust to millions of potential victims, creating false entries in transaction histories.”

Some of the top “dust distributors” sent to more than 400,000 recipients, and so far, more than $740,000 has been stolen this way from 116 victims, he said.