In a disturbing turn of events, a presumed hacking incident has led to a series of phishing emails being sent from the addresses of well-known crypto data and news providers. Industry giants such as Cointelegraph, WalletConnect, Token Terminal, and De.Fi are the latest victims of email impersonation, putting their users at risk.
The Onset of the Phishing Attack
On January 23rd, a warning was issued by blockchain detective ZachXBT via a Telegram post. It was revealed that emails that appeared to be from legitimate domains of Cointelegraph, WalletConnect, Token Terminal, and De.Fi were, in fact, phishing attempts. The fraudulent activity was also confirmed by data from blockchain analytics firm Arkham Intelligence, noting an influx of transactions to a suspect address with most occurring on the same day.
Tracking the Transactions
Etherscan, the Ethereum blockchain explorer, recorded 80 transactions to the suspect address. The financial impact is significant, with reports indicating that around $580,000 has been drained in the attack.
Unraveling the Techniques
As of now, the exact method the attackers used remains unknown. However, several hacking techniques are under scrutiny. One such technique is email spoofing, where attackers forge the ‘from’ field in an email to make it look like it’s from a legitimate source. There’s also the possibility of compromised email servers or individual employee email accounts, which would allow attackers to send emails from actual company addresses.
Responses from the Affected Entities
Cointelegraph and WalletConnect have both issued statements, warning their users about the scam and urging them not to interact with the phishing emails. They have been proactive in distancing themselves from the emails and have stated that they do not issue airdrops, a common lure used in phishing scams.
The Role of Third-Party Email Services
De.Fi has pointed to MailerLite, their email service provider, as a potential breach point for the phishing emails. It’s suggested that the same vulnerability might have affected the other companies as well.
Next Steps for Users
Users who have received these phishing emails are strongly advised not to respond or click on any links. The affected companies are working with cybersecurity services to address the issue and to prevent further incidents.
Conclusion
The phishing scandal serves as a stark reminder of the importance of cybersecurity in the crypto industry. Users are encouraged to remain vigilant and to verify the legitimacy of any communication claiming to be from these companies.
English