Guard

April

Azuki

<div class="textg" style="text-align: justify; font-weight: lighter; line-height: 1.3em; font-size: 15px; border-radius: 3px; color: #80909a; padding: 10px; background-color: #F4F6F9; margin-bottom: 15px;">
 Neither the author, Tim Fries, nor this website, The Tokenist, provide financial advice. Please consult our&nbsp;<a href="https://tokenist.com/terms-of-service/" style="text-decoration:underline;color:#3c7b7b" target="_blank" rel="noreferrer noopener" class="deco-link">website policy</a>&nbsp;prior to making financial decisions.
</div> 
<p class="has-drop-cap">On Friday, April 14th, ConsenSys <a href="https://consensys.net/blog/news/faq-customer-support-data-security-incident/" target="_blank" aria-label=" (opens in a new tab)" rel="noreferrer noopener nofollow" class="deco-link">published</a> a Q&amp;A detailing a “data security incident” that endangered the personal information of MetaMask users that opened technical support tickets. The vulnerability was active between August 2021, and February 2023, and occurred due to the hack of a third-party service provider.</p> 
<h3 id="7-000-metamask-users-exposed-to-a-data-security-incident">7,000 MetaMask Users Exposed to a “Data Security Incident”</h3> 
<p>A recently published Q&amp;A revealed that a third-party service provider offering technical customer support to ConsenSys was the target of a multi-year data security incident. While the issue is now described as contained, MetaMask users that submitted a support ticket between August 2021, and February 2023, have been affected.</p> 
<blockquote class="wp-block-quote"> 
 <p>A third-party service provider that provides customer support ticketing services to ConsenSys was the target of a cyber-security incident. The incident occurred when unauthorised actors gained access to the third-party service provider’s systems. As a result of this incident, MetaMask users who submitted personal data to our customer support may have had that data accessed by an unauthorised third party.</p> 
</blockquote> 
<p>ConsenSys revealed that it can’t identify the exact users whose personal information has been compromised due to the lack of precise data, but stated that around 7,000 customers are at risk. The company, however, pointed out that only users who submitted their personal information to technical support are potentially in danger and highlighted that neither the MetaMask browser extension nor the mobile app were affected.</p> 
<p>The company reported the issue to the Information Commissioner’s Office in the UK and the Data Protection Commission of Ireland. This is the second time in less than six months that ConsenSys was forced to address MetaMask-related privacy concerns. In December, the company made changes <a href="https://tokenist.com/consensys-to-address-metamask-privacy-concerns-with-update/" rel="dofollow" class="deco-link">enabling users to easily replace Infura</a> after it was revealed that it was collecting users’ IP addresses upon every MetaMask transaction.</p> 
<div class="cta-referral"> 
 <img src="https://tokenist.com/wp-content/themes/thetokenist/assets/img/del/cta-referral-1.png" alt="" class="cta-referral__img" loading="lazy" decoding="async"> 
 <div class="cta-referral__text"> 
  <p>Join our&nbsp;<a href="https://t.me/thetokenist" target="_blank" rel="noreferrer noopener nofollow">Telegram group</a>&nbsp;and never miss a breaking digital asset story.</p> 
 </div> 
</div> 
<h3 id="hacks-and-scams-in-the-digital-assets-industry">Hacks and Scams in the Digital Assets Industry</h3> 
<p>Considering that the digital assets industry is still relatively new, and undergoing continuous development, it perhaps isn’t surprising that various kinds of hacks and scams are relatively commonplace. For example, around <a href="https://tokenist.com/a-record-3-7b-was-stolen-in-crypto-hacks-in-2022-defi-most-targeted/" rel="dofollow" class="deco-link">$3.7 billion was stolen in crypto hacks in 2022 alone</a> with just ten “mega hacks” accounting for about 75% of all lost assets.</p> 
<p>So far, 2023 is proving similarly damaging with several high-profile hacks taking place in the first quarter. As recently as the start of this week, a South Korean cryptocurrency exchange <a href="https://tokenist.com/s-korean-crypto-exchange-loses-23-of-its-assets-in-a-13m-hack/" rel="dofollow" class="deco-link">lost 23% of its total assets in a single attack</a>. Web3 security platforms have also reported fighting back against attacks on their own services with Wallet Guard recently revealing it has been <a href="https://www.walletguard.app/blog/ddos-attack-post-mortem" target="_blank" aria-label=" (opens in a new tab)" rel="noreferrer noopener nofollow" class="deco-link">under a high-intensity DDoS attack for many days</a> in mid-March.</p> 
<p>The year also saw several cryptocurrency-adjacent hacks. In a single week in January, the Twitter accounts of the online broker Robinhood, and of the NFT project Azuki were both compromised and used to promote different digital assets scams. Not long after, the official account of an Indian government official was <a href="https://tokenist.com/official-twitter-account-of-indian-state-governor-hacked-to-promote-xrp-scam/" rel="dofollow" class="deco-link">hijacked and used in a similar way</a> for multiple days.</p> 
<div class="cta-sub js__cta-sub"> 
 <div class="cta-sub__start" data-step="1"> 
  <div class="cta-sub__title">
   <strong>Finance is changing.</strong>
  </div> 
  <div class="cta-sub__subtitle">
   Learn how, with Five Minute Finance.
  </div> 
  <div class="cta-sub__excerpt">
   A weekly newsletter that covers the big trends in FinTech and Decentralized Finance.
  </div> <button type="button" class="btn">Try it out (for free)</button> 
 </div> 
 <div class="cta-sub__form" data-step="2" style="display: none;"> 
  <script type="text/javascript" src="https://app.getresponse.com/view_webform_v2.js?u=QcLhh&amp;webforms_id=zw3Wv"></script> 
 </div> 
 <div class="cta-sub__result" data-step="3" style="display: none;"> 
  <div class="cta-sub__title">
   Awesome
  </div> 
  <div class="cta-sub__caption">
   You’ve subscribed.
  </div> 
  <div class="cta-sub__greeting">
   You’re well on your way to being in the know.
  </div> 
 </div> 
</div> 
<p><strong><em>What steps could digital assets platforms take to better protect their users’ assets and information? Tell us what you think in the comments below.</em></strong></p> 
<p>The post <a rel="nofollow" href="https://tokenist.com/metamask-users-who-sought-technical-support-get-their-information-compromised/">MetaMask Users Who Sought Technical Support Get Their Information Compromised</a> appeared first on <a rel="nofollow" href="https://tokenist.com">Tokenist</a>.</p>

MetaMask Users Who Sought Technical Support Get Their Information Compromised

Table of Contents

TokenInsight

Other articles published on Apr 14, 2023

EOS EVM to Allow Interoperability Across Ethereum, EOS

Silk Road Thief Who Stole $3.4B In BTC Sentenced to 1 Year in Prison

IMF tackles growing CBDC interest: New handbook to guide central bank

Best Twitter threads of the day – April 14th

Arizona Governor Stands Up for Blockchain Operators, Vetoes Bill Targeting Excessive Taxes

Blockcast 19: Bitcoin's Rise from the Dead, Shapella Goes Live

Join our free newsletter for daily crypto updates!