2024

<a href="https://bitcoinworld.co.in/scammer-posed-as-forbes-reporter-briefly-hacked-certiks-x-account/" title="Scammer Posed As Forbes Reporter, Briefly Hacked CertiK’s X Account" rel="noopener noreferrer nofollow"></a>
A phishing scammer who posed as a Forbes reporter briefly gained access to the X (formerly Twitter) account of blockchain security platform CertiK and used it to post messages advertising a malicious Web3 app, according to an X post from CertiK on Jan. 5.
The post stated that a “verified account, associated with a well-known media, contacted one of our employees.”&nbsp;
The account turned out to have been compromised, which resulted in the employee getting phished and “related tweets” being posted to the account, the post claimed.
The malicious messages have now been deleted. In a Jan. 5 post to <a href="https://twitter.com/CyversAlerts/status/1743199587144245252" rel="noopener noreferrer nofollow">X</a>, blockchain security platform Cyvers claimed to have seen the messages before they were deleted.&nbsp;
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">ALERT<img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">We are seeing reports that <a href="https://twitter.com/CertiK?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@CertiK</a>'s X account has been compromised!
 Do NOT click any links promoted! <a href="https://twitter.com/hashtag/CyversAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#CyversAlert</a> <a href="https://t.co/4M3JNNaJ53" rel="noopener noreferrer nofollow">pic.twitter.com/4M3JNNaJ53</a>
 — <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> Cyvers Alerts <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@CyversAlerts) <a href="https://twitter.com/CyversAlerts/status/1743199587144245252?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 5, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
According to them, the messages stated that Uniswap’s router had been compromised and that users needed to revoke all approvals for Uniswap using Revoke.cash. It led to a fake version of Revoke.cash that attempted to steal users’ crypto.
The malicious messages were discovered within seven minutes of them being posted, CertiK claimed, and the team immediately began a recovery process to remove the attacker’s access to its X account.&nbsp;
Within 14 minutes, the team managed to delete the first of the malicious posts. After 37 minutes, the team’s investigation was over and the danger was neutralized.&nbsp;
CertiK claimed that the scam was part of “a large-scale ongoing attack” similar to the one described by X user NFT_Dreww.eth in a Dec. 21 post.&nbsp;
NFT_Dreww.eth had described a phishing scam in which the attacker posed as a Forbes reporter and asked victims to connect their X accounts to the Calendly calendar app to schedule a meeting.&nbsp;
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/26d4.png" alt="⛔" class="wp-smiley" style="height: 1em; max-height: 1em;"> 𝐂𝐚𝐥𝐞𝐧𝐝𝐥𝐲 𝐒𝐨𝐜𝐢𝐚𝐥 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐒𝐜𝐚𝐦 <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/26d4.png" alt="⛔" class="wp-smiley" style="height: 1em; max-height: 1em;">
 Have you been contacted by a 'Forbes Employee' or someone who wants to interview you for an article, partnership, or job? Are they asking you to connect your wallet or twitter account to Calendly? If so, DON'T… <a href="https://t.co/FNKyl9ZsGr" rel="noopener noreferrer nofollow">pic.twitter.com/FNKyl9ZsGr</a>
 — NFT_Dreww.eth (@nft_dreww) <a href="https://twitter.com/nft_dreww/status/1737824627378798897?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">December 21, 2023</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
The links did not actually go to Calendly’s official website. Instead, they went to a fake Calendly site with a misspelled URL.&nbsp;
See Also: <a class="row-title" href="https://bitcoinworld.co.in/nest-wallet-co-founder-bill-lou-lost-125000-worth-of-coins-to-fake-airdrop-scam/" aria-label="“Nest Wallet Co-founder, Bill Lou, Lost $125,000 Worth Of Coins To Fake Airdrop Scam” (Edit)" rel="noopener noreferrer nofollow">Nest Wallet Co-founder, Bill Lou, Lost $125,000 Worth Of Coins To Fake Airdrop Scam</a>
Once the victim “connected” their X account to the fake site, they unwittingly approved permissions for the attacker to post to X on their behalf.
In a reply to CertiK’s post, on-chain sleuth ZachXBT shared an alleged screenshot of the message used to phish CertiK.&nbsp;
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Here is the leaked DM Certik got phished by.
 Why did you not find the “well-known media” account which contacted you suspicious since they had not posted since April 2020 (clearly compromised)?
 Will Certik be reimbursing victims? <a href="https://t.co/ys1HcQgPCT" rel="noopener noreferrer nofollow">pic.twitter.com/ys1HcQgPCT</a>
 — ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1743260567060787424?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 5, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
The message appears to be from a person impersonating former Forbes and Bloomberg contributor Mark Beech, who passed away in 2020.
In their post, ZachXBT asked CertiK if they would reimburse victims who may have been phished as a result of the malicious post to CertiK’s account. In response, CertiK <a href="https://twitter.com/CertiK/status/1743278606569083344" rel="noopener noreferrer nofollow">stated</a> “We encourage those affected during the recent Twitter incident to reach out to us.”
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Thank you, ZachXBT, for sharing further details from the scammer. While it’s easy to point the finger after a phishing attack, the reality is that these scams are designed to exploit human trust and vulnerabilities. That is why we are dedicated to build strong security systems…
 — CertiK (@CertiK) <a href="https://twitter.com/CertiK/status/1743278606569083344?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 5, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
Phishing attacks have compromised several high-profile crypto X accounts over the past two weeks. On Dec. 29, Compound Finance’s account was compromised. On Jan. 4, the founder of Polychain Capital was hit as well.
The post <a href="https://bitcoinworld.co.in/scammer-posed-as-forbes-reporter-briefly-hacked-certiks-x-account/" rel="noopener noreferrer nofollow">Scammer Posed As Forbes Reporter, Briefly Hacked CertiK’s X Account</a> appeared first on <a href="https://bitcoinworld.co.in" rel="noopener noreferrer nofollow">BitcoinWorld</a>.

Scammer Posed As Forbes Reporter, Briefly Hacked CertiK’s X Account

ItsBitcoinWorld

Other articles published on Jan 7, 2024

Shiba Inu (SHIB) Price Performance Is Worrying, Here's Why

AMP: Fast, Efficient and Secure Token for Collateral Service

Shiba Inu’s Shibarium Loses Steam, Is This the Reason Behind SHIB’s Fall?

Crypto Mavericks Unleashed: Pullix (PLX) Emerges Strong with Uniswap (UNI) and Polkadot (DOT)

AXS Price Prediction: Will Bulls Succeed In Maintaining Above $8?

If this is true, LUNC & APT might go on a bull run soon

Join our free newsletter for daily crypto updates!