{"id":4328,"date":"2022-02-24T07:52:34","date_gmt":"2022-02-24T07:52:34","guid":{"rendered":"http:\/\/www.guarantee.pl\/?p=4328"},"modified":"2022-02-24T07:56:16","modified_gmt":"2022-02-24T07:56:16","slug":"these-unaffiliated-cash-app-giveaways-appear-to-be-4","status":"publish","type":"post","link":"http:\/\/www.guarantee.pl\/pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/","title":{"rendered":"These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above"},"content":{"rendered":"<p><title>These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above<\/title><\/p>\n<h2>The Cash App phishing website uses a valid Secure Sockets Layer (SSL) certificate obtained from Let&#8217;s Encrypt and asks for an email or mobile number<\/h2>\n<p>A Cash App user tweeted at , asking him about the giveaway and posting a screenshot of a Cash App request for $20 they received. The message said \u201ccongrats you won verify real account to get $1,000.\u201d This is similar to the fake Cash App accounts sending incoming requests that I noted earlier.<\/p>\n<p>So even if the Cash App scammers aren&#8217;t creating impersonation Twitter accounts, they have found it much easier to simply create an impersonation account through Cash App.<\/p>\n<p>Outside of direct impersonations of the Cash App brand, its CEO and notable figures, I believe it is safe to assume the majority of Cash App scammers are using stolen images and video content to create fake personas.<\/p>\n<h2>Cash App Phishing<\/h2>\n<p>During my research, I also encountered attempts at phishing Cash App users. <a href=\"https:\/\/installmentloansgroup.com\/installment-loans-wi\/\">installment loans in Wisconsin<\/a> A user named was riding the #CashAppFriday hashtag, DMing users about winning the giveaway, sending the payment along with a link to a website, saying \u201cgo on and receive it.\u201d<\/p>\n<p>Unlike most apps and services, Cash App does not ask for a password. Instead, it asks for an email address or phone number as the username, which triggers a request for a one-time use \u201clogin code,\u201d also known as a one-time password (OTP). The code is delivered to the user&#8217;s email address or mobile phone, as seen in the image below.<\/p>\n<p>In the example above, the Cash App phishing website prefaces that the cashtag \u201c$cash\u201d (which isn&#8217;t affiliated with Cash App) has \u201cinitiated deposit of $1000 to your Cashapp.\u201d<\/p>\n<p><!--more--><\/p>\n<p>It is followed by a second screen, which asks the user to provide their OTP. Inputting an invalid OTP results in an error message, which implies there may be some type of verification happening to ensure the user provides their valid OTP. To safeguard my privacy during this research, I did not provide my OTP.<\/p>\n<p>However, I did observe a Twitter user who proceeded to provide their information to one of these Cash App phishing websites and reached a fake webpage saying \u201cPayment Failed.\u201d The error message would likely trick the user into believing there was merely a technical problem in sending the so-called giveaway payment, rather than a scam.<\/p>\n<p>I was able to identify at least two Cash App phishing links, both of which used the Bitly URL shortening service. Statistics from those two links showed they each received over 500 clicks, mostly from users in the United States with a few clicks from the United Kingdom, Nigeria, Philippines, Australia and Guatemala. While Cash App is available outside the United States, the giveaways for #SuperCashAppFriday and #CashAppFriday are limited to U.S. participants.<\/p>\n<p>Tenable notified Cash App about our research findings prior to publication. A spokesperson for Cash App provided us with the following statement:<\/p>\n<p>&#8220;We are aware of social media accounts that claim to be associated with Cash App. We have been working with Twitter and Instagram to deactivate all accounts that infringe our intellectual property rights (eg: use our name or logo without permission) or seek to take advantage of our customers.<\/p>\n<p>As a reminder, the Cash App team will never ask customers to send them money, nor will they solicit a customer&#8217;s PIN or sign-in code outside of the app. Additionally, Cash App currently has only two official Twitter accounts, and , both of which have blue, verified check , you should contact Cash App support through the app or website immediately.&#8221;<\/p>","protected":false},"excerpt":{"rendered":"<p>These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above The Cash App phishing website uses a valid Secure Sockets Layer (SSL) certificate obtained from Let&#8217;s Encrypt and asks for an email or mobile number A Cash App user tweeted at , asking him about the giveaway and [&hellip;]<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[589],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v17.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above - Guarantee Insurance<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/www.guarantee.pl\/pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/\" \/>\n<meta property=\"og:locale\" content=\"pl_PL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above - Guarantee Insurance\" \/>\n<meta property=\"og:description\" content=\"These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above The Cash App phishing website uses a valid Secure Sockets Layer (SSL) certificate obtained from Let&#8217;s Encrypt and asks for an email or mobile number A Cash App user tweeted at , asking him about the giveaway and [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"http:\/\/www.guarantee.pl\/pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/\" \/>\n<meta property=\"og:site_name\" content=\"Guarantee Insurance\" \/>\n<meta property=\"article:published_time\" content=\"2022-02-24T07:52:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-02-24T07:56:16+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Napisane przez\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Szacowany czas czytania\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minuty\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.guarantee.pl\/#website\",\"url\":\"https:\/\/www.guarantee.pl\/\",\"name\":\"Guarantee Insurance\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.guarantee.pl\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"pl-PL\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.guarantee.pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/#webpage\",\"url\":\"https:\/\/www.guarantee.pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/\",\"name\":\"These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above - Guarantee Insurance\",\"isPartOf\":{\"@id\":\"https:\/\/www.guarantee.pl\/#website\"},\"datePublished\":\"2022-02-24T07:52:34+00:00\",\"dateModified\":\"2022-02-24T07:56:16+00:00\",\"author\":{\"@id\":\"https:\/\/www.guarantee.pl\/#\/schema\/person\/3f93955d451a30a7323a727051e00e5c\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.guarantee.pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/#breadcrumb\"},\"inLanguage\":\"pl-PL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.guarantee.pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.guarantee.pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Strona g\\u0142\\u00f3wna\",\"item\":\"https:\/\/www.guarantee.pl\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.guarantee.pl\/#\/schema\/person\/3f93955d451a30a7323a727051e00e5c\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.guarantee.pl\/#personlogo\",\"inLanguage\":\"pl-PL\",\"url\":\"http:\/\/2.gravatar.com\/avatar\/5b37040e6200edb3c7f409e994076872?s=96&d=mm&r=g\",\"contentUrl\":\"http:\/\/2.gravatar.com\/avatar\/5b37040e6200edb3c7f409e994076872?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/www.guarantee.pl\"],\"url\":\"http:\/\/www.guarantee.pl\/pl\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above - Guarantee Insurance","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/www.guarantee.pl\/pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/","og_locale":"pl_PL","og_type":"article","og_title":"These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above - Guarantee Insurance","og_description":"These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above The Cash App phishing website uses a valid Secure Sockets Layer (SSL) certificate obtained from Let&#8217;s Encrypt and asks for an email or mobile number A Cash App user tweeted at , asking him about the giveaway and [&hellip;]","og_url":"http:\/\/www.guarantee.pl\/pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/","og_site_name":"Guarantee Insurance","article_published_time":"2022-02-24T07:52:34+00:00","article_modified_time":"2022-02-24T07:56:16+00:00","twitter_card":"summary_large_image","twitter_misc":{"Napisane przez":"admin","Szacowany czas czytania":"3 minuty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/www.guarantee.pl\/#website","url":"https:\/\/www.guarantee.pl\/","name":"Guarantee Insurance","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.guarantee.pl\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"pl-PL"},{"@type":"WebPage","@id":"https:\/\/www.guarantee.pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/#webpage","url":"https:\/\/www.guarantee.pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/","name":"These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above - Guarantee Insurance","isPartOf":{"@id":"https:\/\/www.guarantee.pl\/#website"},"datePublished":"2022-02-24T07:52:34+00:00","dateModified":"2022-02-24T07:56:16+00:00","author":{"@id":"https:\/\/www.guarantee.pl\/#\/schema\/person\/3f93955d451a30a7323a727051e00e5c"},"breadcrumb":{"@id":"https:\/\/www.guarantee.pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/#breadcrumb"},"inLanguage":"pl-PL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.guarantee.pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.guarantee.pl\/these-unaffiliated-cash-app-giveaways-appear-to-be-4\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Strona g\u0142\u00f3wna","item":"https:\/\/www.guarantee.pl\/"},{"@type":"ListItem","position":2,"name":"These unaffiliated Cash App giveaways appear to be a successful endeavor, as evidenced in the image above"}]},{"@type":"Person","@id":"https:\/\/www.guarantee.pl\/#\/schema\/person\/3f93955d451a30a7323a727051e00e5c","name":"admin","image":{"@type":"ImageObject","@id":"https:\/\/www.guarantee.pl\/#personlogo","inLanguage":"pl-PL","url":"http:\/\/2.gravatar.com\/avatar\/5b37040e6200edb3c7f409e994076872?s=96&d=mm&r=g","contentUrl":"http:\/\/2.gravatar.com\/avatar\/5b37040e6200edb3c7f409e994076872?s=96&d=mm&r=g","caption":"admin"},"sameAs":["http:\/\/www.guarantee.pl"],"url":"http:\/\/www.guarantee.pl\/pl\/author\/admin\/"}]}},"_links":{"self":[{"href":"http:\/\/www.guarantee.pl\/pl\/wp-json\/wp\/v2\/posts\/4328"}],"collection":[{"href":"http:\/\/www.guarantee.pl\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.guarantee.pl\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.guarantee.pl\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.guarantee.pl\/pl\/wp-json\/wp\/v2\/comments?post=4328"}],"version-history":[{"count":1,"href":"http:\/\/www.guarantee.pl\/pl\/wp-json\/wp\/v2\/posts\/4328\/revisions"}],"predecessor-version":[{"id":4329,"href":"http:\/\/www.guarantee.pl\/pl\/wp-json\/wp\/v2\/posts\/4328\/revisions\/4329"}],"wp:attachment":[{"href":"http:\/\/www.guarantee.pl\/pl\/wp-json\/wp\/v2\/media?parent=4328"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.guarantee.pl\/pl\/wp-json\/wp\/v2\/categories?post=4328"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.guarantee.pl\/pl\/wp-json\/wp\/v2\/tags?post=4328"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}