Specter flags scam using fake Remix interface and Uniswap-themed ENS names

On-chain sleuth Specter said attackers behind an ongoing campaign are using YouTube videos to distribute so-called arbitrage bot tutorials and code, then steering victims to a fake Remix development interface to compile and deploy contracts. The setup is designed to look legitimate from the start. According to Specter, the attackers also registered ENS names containing "Uniswap" and used those addresses to mimic incoming transfers from legitimate DeFi activity. That presentation can make victims think the arbitrage bot they deployed is earning profits through Uniswap, when the flow is actually part of the scam. Once victims send their own assets into the contract, the funds are moved out by the attackers. Specter added that the threat actors appear to remain active and are still holding a sizable share of the stolen assets across two addresses.