Men Pretending to Be Women in Crypto

InfoSec Seinfeld do you know who else is a man?

By Dominic Alvieri

@AlvieriD

11/20/2021

Fake account and shady investment warnings. These female accounts have man hands and Twitter thumbs.

A picture tells a thousand words. A jpeg tells thousands of bytes. More actually and precious metadata. Location, camera lens, etc. These images above are the snapshots used by several woman of crypto currently online believed to operated by men.  Students, models, actors and all walks of life are used.

Stella Catrin @stellacatrin
Joined November 2021
10,000 followers. 

Today is November 21st, 2021.

This new image used above was taken by Omar Lopez and is fresh from Orlando, Florida in April and uploaded in May 2021. She is new, dangerous and readily available online for free. I would expect to see her image again. More examples to watch out for. Data points an alleged foreign man behind this Californian woman. Suspect name is unconfirmed as of posting.

Super Model Thylane Blondeau is now crypto investor Henley Nava. Thylane has been named the most beautiful in the world. Now pitching Chinese mining among other suspect investments. 

Monday, November 22nd, 2021 addition.

Henley Nava @henleynava
June 2021
58,000 followers

This account has been "giving" away crypto and pitching suspect mining and crypto. The modus operandi is similar in pattern and recognition to the suspected accounts in this article. 

Another suspected fake has even more data pointing to India including Twitter handles, IP addresses, Telegram chats and more. There is even a name for the man behind one of "The Janet Trio."

Newest active part of the Janet Trio...

Taya Janet @tayajanet
Joined August 2021
62,000 followers

The man in the photograph is Gopal Krishna and alleged new Taya Janet. An aspiring Linux developer and failed movie critic from Mumbai, India. Irrefutable technical evidence links this man to this account. If it isn't him, he sure knows who it is. Money is on the sloppy developer.

Gopal Krishna
Joined unknown
Mumbai, India
Twitter profile...

One of several missed forensic links left behind by Mr. Krishna...a link to a Twitter account.

Adhish Ramkurrun. Another forgotten fake account. Technically sloppy.

From Montreal to Minsk...and Medium.

These crypto queens above and below are retweeting the same garbage as their group. One is a self proclaimed Crypto Professor with nearly 100,000 followers on Twitter and he and the crypto queen below have very similar tweets and likes. Yesterday a Chinese mining "legit investment.' Today multiple tweets with mining and investments many registered the same day of September 2nd.

Tron[.]AC,  TRX[.]Blue and TRX[.]ST are all registered on September 2nd, 2021. All three share the same IP and have obfuscated their origins. Two of the three are utilizing a Singapore data center to forward packets to China. There are many others registered, Tron-Life, TRX[.]in...

A Russian man is operating out of Belize is behind an account. A Chinese national is also guilty of running crypto scams. Both pending confirmation.

The Professor is Gilligan

Crypto Queen @coin_mining1
Joined June 2021
40,000 followers

Associating with Russian tweets and Chinese mining.

Does anyone verify these giveaways? 

The amount of crap tweeted today is unbelievable. All have tweeted again today, November 21st, 2021 The Professor is acting like Gilligan tweeting hidden Chinese based mining and other shady crypto investments.

Building a crypto followers database is as valuable a commodity as a crypto brokerage firm breach. You can cross reference data, send malicious cryptominers, clipboard stealers...

There is a new trading firm just found with ties to other crypto scams, follow up details and reveals pending.

Stay safe.

Dominic Alvieri

The Cyber Show