Token

ZachXBT

Arkham

<div class="cryptonews">
 <p class="is-style-lead">Crypto data and news providers Cointelegraph, WalletConnect, Token Terminal, and De.Fi <a rel="noopener noreferrer nofollow" title="email" href="https://thebittimes.com/tag/email.html">email</a> addresses are sending <a rel="noopener noreferrer nofollow" title="phishing" href="https://thebittimes.com/tag/phishing.html">phishing</a> <a rel="noopener noreferrer nofollow" title="emails" href="https://thebittimes.com/tag/emails.html">emails</a>.</p>
 <p>In a Jan. 23 Telegram post, pseudonymous blockchain sleuth ZachXBT warned emails from domains under the legitimate domains of those companies. Data gathered from blockchain analytics service Arkham Intelligence shows that the address received hundreds of transactions, with nearly all activity starting on Jan. 23. Etherscan data shows 80 transactions just on Ethereum (ETH).</p>
 <blockquote class="wp-block-quote">
  <p>$580,000 has been drained so far.</p> <cite>ZachXBT | Investigations by ZachXBT Telegram channel</cite>
 </blockquote>
 <figure class="wp-block-image size-full"><picture decoding="async" class="wp-image-14241501">
   <source type="image/webp" srcset="https://cdn.thebittimes.com/images/2024/01/23/47093308e22023ecfa63a212203b7798.webp.webp">
   <img decoding="async" width="826" height="744" src="https://cdn.thebittimes.com/images/2024/01/23/47093308e22023ecfa63a212203b7798.webp" alt="Cointelegraph, others sent phishing emails in presumed hack - 1"> 
  </picture>
  <figcaption class="wp-element-caption">
   Visualization of the transactions that reached the phishing address since Jan. 23 | Source: Arkham Intelligence
  </figcaption>
 </figure>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Trezor investigates phishing attack that left 66k users vulnerable
 </div>
 <p>So far, it is unclear how the attacker could send messages that appear to come from the aforementioned organizations. Multiple hacking techniques may have been employed by the entity behind the phishing attack.</p>
 <p>One tactic is email spoofing, where attackers forge the email header to make the message seem like it’s from a legitimate source. In this scenario, the attacker could have altered the “from” field in the emails to mimic the legitimate domains of the cited companies. However, this approach is usually thwarted by modern email services unless the attacker compromises the DNS records.</p>
 <p>Another plausible method is the compromise of the companies’ email servers. Gaining access to these servers would enable the attackers to send emails that genuinely come from the companies’ addresses. Alternatively, the attackers might have accessed individual employee email accounts within these organizations.</p>
 <p>This can be done through phishing, malware, or using credentials from other data breaches. Having control over an employee’s email account allows the attacker to send emails that seem to come from that individual.</p>
 <p>Lastly, a breach in the security of third-party email service providers used by these companies could also explain the situation. In this case, the attackers would have targeted the service providers rather than the companies, enabling them to send emails from legitimate addresses.</p>
 <p>At this point, it is unknown what method the attacker employed if any of the ones listed were used. In the meantime, Cointelegraph issued a warning article to its readers, and the Etherscan page for the address also includes a <a rel="noopener noreferrer nofollow" title="phishing" href="https://thebittimes.com/tag/phishing.html">phishing</a> scam disclaimer.</p>
 <p>WalletConnect took to X to explain that the company is aware of the phishing campaign promoting a fake airdrop. The company confirmed that its employees or affiliates did not send the email directly and is collaborating with crypto hack protection service Blockaid.</p>
 <blockquote class="wp-block-quote">
  <p>While we continue to better understand the situation further, we urge anyone who has received this <a rel="noopener noreferrer nofollow" title="email" href="https://thebittimes.com/tag/email.html">email</a> not to interact with it whatsoever.</p> <cite>WalletConnect | X</cite>
 </blockquote>
 <p>Cointelegraph similarly announced in an X post that the company is “aware of scammers impersonating Cointelegraph.” The company reiterated that it does not issue airdrops.</p>
 <blockquote class="wp-block-quote">
  <p>Please don’t respond or click on any links sent in your DM/E-MAIL by anyone claiming to be part of the Cointelegraph team.</p> <cite>Cointelegraph | X</cite>
 </blockquote>
 <p>Token Terminal and De.Fi have issued similar warnings, with the latter attributing the incident to MailerLite — the mail service provider used by the company. The firm explained that the other emails were likely sent the same way.</p>
 <blockquote class="wp-block-quote">
  <p>Unfortunately, it seems like MailerLite was also used by WalletConnect, Cointelegraph &amp; Token Terminal which have also become victims of this.</p> <cite>De.Fi | X</cite>
 </blockquote>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Hackers hijack VeChain’s X page
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/cointelegraph-others-sent-phishing-emails-in-presumed-hack-tbt77457.html">https://thebittimes.com/cointelegraph-others-sent-phishing-emails-in-presumed-hack-tbt77457.html</a></p>

Cointelegraph, others sent phishing emails in presumed hack

TheBitTimes

Other articles published on Jan 23, 2024

XRP Reaches Lowest Point Since November 2023 Amid Whale Accumulation

Why Investors Are Doubling Down On Scorpion Casino (SCORP) Amidst The Current Crypto Market Bull Run

Whale Moves: A Strategic Acquisition of $46.14 Million in Ethereum

Crypto Market Continues to Face Downturn

Bitcoin at a Critical Juncture: The Role of Fibonacci Levels in Price Movements

Shiba Inu: Will Elon Musk's X Add SHIB in Payment Feature?

Join our free newsletter for daily crypto updates!