Web3 Firms Impersonated in Coordinated Phishing Attack
A coordinated phishing attack is currently targeting various Web3 firms in the crypto community. Scammers have been sending phishing emails to investors, claiming to be from platforms such as WalletConnect, Token Terminal, De.Fi, and Cointelegraph.
Screenshots Reveal Fake Airdrop Offers
The phishing emails all contain offers of fake airdrops to entice users into clicking on the links. Each impersonated company has a different reason for the supposed airdrops. WalletConnect claims it’s a “special occasion” to show gratitude, Token Terminal celebrates its beta version launch, De.Fi promotes innovative staking options, and Cointelegraph marks its tenth anniversary.
Email Addresses Indistinguishable from Genuine Ones
The scammers cleverly use email addresses that closely resemble those of the genuine companies, leading many victims to fall for the scams. Over $580,000 has already been stolen from users who clicked on the fraudulent links.
Companies Warn Users and Deny Responsibility
Affected firms have issued official statements denying any involvement in the phishing attacks and warning users not to interact with the airdrop links. WalletConnect confirms that the email did not come from them or any affiliates. Cointelegraph clarifies that they do not issue airdrops, and Token Terminal confirms the email’s fakeness.
“We are aware of an email that appears to have been sent from an email address linked to WalletConnect…the link appears to lead to a malicious site,” warns WalletConnect.
De.Fi discovered that the issue originated from their email service provider, Mailer Lite, and they are taking steps to enhance user safety by moving their databases to another provider.
Hot Take: Stay Vigilant Against Phishing Attacks
It’s crucial for crypto users to remain vigilant against phishing attacks. Scammers are becoming increasingly sophisticated in their methods, impersonating reputable Web3 firms to trick unsuspecting individuals. Always double-check the email sender’s address and be cautious of unsolicited offers or requests for personal information. If you receive suspicious emails claiming to be from crypto platforms, it’s best to verify their legitimacy through official channels before taking any action. By staying alert and informed, you can protect yourself from falling victim to these coordinated phishing attacks.