Cryptocurrency

2024

Cryptocurrency data aggregator CoinGecko has confirmed a data breach suffered by its third-party email management platform GetResponse.
Following yesterday’s <a href="https://cointelegraph.com/news/tether-ceo-warns-crypto-airdrop-scam">reports of a new wave of crypto airdrop scams</a>, CoinGecko confirmed that GetResponse suffered a data breach on June 5, allowing attackers to export the contact information of over 1.9 million CoinGecko users.
The security breach occurred due to a compromised employee account, according to CoinGecko’s June 7 <a href="https://www.coingecko.com/learn/getresponse-data-breach-june-2024" target="_blank" rel="noopener nofollow">announcement</a>:
<blockquote data-ct-non-breakable="true">
 “An attacker had compromised a GetResponse employee’s account, leading to a breach. We received confirmation from the GetResponse team on 6 June 2024, at 11:58 AM UTC, that a data breach had occurred.”
</blockquote>
The compromised data include users’ names, email addresses, IP addresses, location of email opens and other metadata such as sign-up dates and subscription plans.
CoinGecko user accounts and passwords remain secure and uncompromised.
Related: <a href="https://cointelegraph.com/news/crypto-hacks-2024-private-key-leaks">Crypto hacks increase in 2024, but smart contracts are not to blame</a>
<h2 data-ct-non-breakable="true" id="over-23-000-phishing-emails-sent-so-far">Over 23,000 phishing emails sent so far</h2>
According to CoinGecko, while their main email domain wasn't compromised, the attacker still managed to send a total of 23,723 phishing emails.
<blockquote data-ct-non-breakable="true">
 “The attacker exported 1,916,596 contacts from CoinGecko’s GetResponse account and sent phishing emails to 23,723 emails from another GetResponse client’s account (alj.associates).”
</blockquote>
Phishing attacks involve hackers aiming to steal sensitive information like <a href="https://cointelegraph.com/explained/crypto-wallets-explained">crypto wallet</a> private keys. Other phishing attacks, known as <a href="https://cointelegraph.com/news/binance-antidote-address-poisoning-scams-algorithm">address poisoning scams</a>, aim to trick investors into willingly sending funds to a fraudulent address that looks similar to addresses they previously interacted with.
To safeguard from phishing emails, users should double-check the email’s authenticity and ensure they have two-factor authentication (2FA) on crypto platforms, according to Hakan Unal, senior blockchain scientist at on-chain security firm Cyvers. He told Cointelegraph:
<blockquote data-ct-non-breakable="true">
 “The immediate concern is the risk posed to individuals who might receive these compromised emails. To stay safe, users should verify the authenticity of such emails and enable multifactor authentication on all crypto accounts.”
</blockquote><iframe width="100%" height="315" src="https://www.youtube.com/embed/kyNQ5YoFkWo" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen data-ct-non-breakable="true"></iframe>
<figcaption style="text-align: center;">
 $3 billion stolen in hacks — Why are crypto crimes surging?. Source: <a href="https://www.youtube.com/watch?v=kyNQ5YoFkWo&amp;t=6s" target="_blank" rel="noopener nofollow">Cointelegraph</a>
</figcaption>
Related: <a href="https://cointelegraph.com/news/binance-visa-mastercard-crypto-purchases-resume">Binance reinstates crypto buys via Mastercard</a>
<h2 data-ct-non-breakable="true" id="private-key-and-data-leaks-remain-the-biggest-reason-behind-crypto-hacks">Private key and data leaks remain the biggest reason behind crypto hacks</h2>
Private key and personal data leaks have become the biggest reason behind cryptocurrency-related hacks, as exploiters are targeting the lowest-hanging fruit instead of struggling to break into more complex protocols.
Over 55% of the hacked digital assets were lost to private key leaks during 2023, according to Merkle Science’s 2024 HackHub <a href="https://info.merklescience.com/hackhub-report-2024" target="_blank" rel="noopener nofollow">report</a>.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-06/253b42b6-8371-4638-822a-7909e5dfff9b.png" alt="" title="">
 <figcaption style="text-align: center;">
 Crypto total losses by vulnerabilities. Source: Merkle Science
 </figcaption>
</figure>
Private key leaks remain the biggest vulnerability in the crypto space, according to Mriganka Pattnaik, co-founder and CEO of crypto risk and intelligence platform Merkle Science. He told Cointelegraph:
<blockquote data-ct-non-breakable="true">
 “The biggest security concern right now is the rapid increase in losses due to private key leaks… hackers may be looking for easier targets that require less technical knowledge to exploit, such as stealing private keys.”
</blockquote>
Magazine: <a href="https://cointelegraph.com/magazine/cailtlyn-jenner-token-scammer-sahil-arora-celebrity-network-leaked-price-list/">Caitlyn Jenner meme coin ‘mastermind’s’ celebrity price list leaked</a>

CoinGecko confirms email provider data breach, over 23,000 phishing emails sent

Table of Contents

Cointelegraph

Other articles published on Jun 7, 2024

Pepe Coin Surpasses Shiba Inu and XRP in Trading Volume

Why This Solana (SOL) Cat Meme Coin Could Overtake All Dog-Themed Tokens

Ancient Pre-Mine Ethereum Address Suddenly Activated as ETH Price Plunges

Semler Scientific buys $17M Bitcoin, plans $150M fundraise for more BTC acquisition

Maker Metrics Under The Microscope: Clues To MKR’s Price Path Ahead

Ape Planet (APEPLAN) to Explode 14,000% Ahead of KuCoin Listing, as Shiba Inu, Bonk and Dogecoin Lag

Join our free newsletter for daily crypto updates!