The SlowMist Security Team has published an article exposing a new type of cryptocurrency scam. This scam exploits the remote procedure call (RPC) function of modified Ethereum nodes to commit fund fraud. Scammers lure users to download the IMTOKEN wallet and gain their trust by offering 1 $USDT and a small amount of $ETH as bait. Then, the scammers guide users to change the RPC URL of their $ETH to a node controlled by the scammers. This node uses TENDERLY's FORK function to falsify the user's $USDT balance. When users see the incorrect balance, they may attempt to make a transfer, but by that time, the scammers have disappeared. SlowMist Technology reports that such scams exploit users' trust and negligence, resulting in asset losses. The SlowMist Security Team reminds users to remain vigilant during transactions and avoid using untrusted RPC nodes.