Crypto Providers Fall Victim to Phishing Emails
Crypto data and news providers Cointelegraph, WalletConnect, Token Terminal, and De.Fi have been targeted by a phishing attack. The attack involves emails from domains that appear to be legitimate addresses of these companies. The address receiving the phishing emails has received numerous transactions, amounting to $580,000 drained so far.
Methods Employed by the Attackers
The exact method used by the attackers is still unclear. However, there are several possible techniques they may have employed. One method is email spoofing, where attackers manipulate the email header to make it seem like the email is from a trusted source. Another possibility is that the attackers compromised the email servers of these companies or gained access to individual employee accounts through phishing or malware attacks. It is also possible that third-party email service providers used by these companies were breached.
Response from the Affected Companies
The affected companies have issued warnings to their readers and users, urging them not to interact with any suspicious emails or click on any links. WalletConnect is collaborating with Blockaid, a crypto hack protection service, to investigate the incident. Cointelegraph has emphasized that it does not issue airdrops and warned its audience about scammers impersonating the company.
MailerLite Implicated in the Incident
Token Terminal and De.Fi have also issued similar warnings, with De.Fi attributing the incident to MailerLite, the mail service provider used by the company. It is believed that MailerLite was also used by WalletConnect, Cointelegraph, and Token Terminal in this phishing attack.
Hot Take: Phishing Attack Targets Crypto News Providers
A recent phishing attack has targeted prominent crypto data and news providers, including Cointelegraph, WalletConnect, Token Terminal, and De.Fi. The attackers have been sending phishing emails from domains that appear to be legitimate addresses of these companies. This attack has resulted in a significant amount of funds being drained, with $580,000 already lost.
The exact methods used by the attackers are still unknown, but there are several possibilities, including email spoofing, compromise of email servers or individual accounts, and breaches of third-party email service providers. The affected companies have issued warnings to their readers and users, advising them not to interact with suspicious emails or click on any links.
WalletConnect is working with Blockaid to investigate the incident, while Cointelegraph has emphasized that it does not issue airdrops and warned about scammers impersonating the company. Token Terminal and De.Fi have also issued similar warnings, with De.Fi attributing the incident to MailerLite, the mail service provider used by the company.