Ethereum

Foundation

Read

The Ethereum Foundation saw its email account hacked to promote a scam masquerading as a Lido staking scheme. 
According to <a href="https://blog.ethereum.org/en/2024/07/02/blog-incident" target="_blank" rel="">a recent announcement</a>, the Ethereum Foundation’s email account used to send official updates was compromised on June 23. 
The attackers used the updates@blog.ethereum.org email address to send scam emails to 35,794 addresses. 
Within the email, users came across an announcement that the Ethereum Foundation had collaborated with the <a href="https://crypto.news/lido-dao-prediction-results-in-19-99-gains-within-72-hours/">Lido decentralized autonomous organization</a> (LidoDAO). As a part of the partnership, a 6.8% yield on staked Ether (stETH), Wrapped Ether (WETH), or Ether&nbsp; 
ETH deposits were being offered. 
“The collaboration harnesses the strengths of both organizations to deliver deep liquidity and competitive rewards, enhancing your staking experience with over 100+ integrations,” an excerpt from the announcement said. 
Further, it added that the staking service would be “protected and verified” by the Ethereum Foundation. 
At the bottom of the announcement was a “Begin Staking” button. Clicking this would redirect users to a website created by the attackers. 
<figure class="wp-block-image">
 <img decoding="async" src="https://lh7-us.googleusercontent.com/docsz/AD_4nXc1d9YlkzVa0TnarLFwjsMhTz5nPS81BNkMzQNp-YPL980EbbU-yWykz1353TWG78a6mr23cnv_VOtPZYAoQanrHMuOJ7kLhRigf6-IlZ7X4znEsiG1hyr1xQyc0PtiTUmEYgU9eMGXMsgaDpk24oa6RkF3?key=XWmLENrEKWwPeT2FXWWP8A" alt="Ethereum Foundation’s email hacked to promote bogus Lido staking scam&nbsp; - 28">
 <figcaption class="wp-element-caption">
 Phishing email created by Ethereum Foundation hacker | Source: Ethereum Foundation blog
 </figcaption>
</figure> 
Dubbed “Staking Launchpad,” the malicious website allegedly had a crypto drainer running in the background. Further, the website was designed to look professional. 
<figure class="wp-block-image">
 <img decoding="async" src="https://lh7-us.googleusercontent.com/docsz/AD_4nXessQ2OB6JWIK4Hu486Q7vn70N20w-MCOcXAmMAtY3EfDqwdDVzkl9t-epNtER_uawlq7M208jiSDsHMPBIWWipS-JNGzymclJnahyd6wi82ovyqrInAc7lLUTAkRSuH_Z_0RXGquK846mPMQvDlMH8vuQ?key=XWmLENrEKWwPeT2FXWWP8A" alt="Ethereum Foundation’s email hacked to promote bogus Lido staking scam&nbsp; - 29">
 <figcaption class="wp-element-caption">
 The fake website is linked to the email sent by the hacker | Source: Ethereum Foundation blog
 </figcaption>
</figure> 
&nbsp;Anyone clicking on the “Stake” button on the website would be asked to approve the transaction in their wallet. If approved, all funds from the user’s account would be drained. 
 You might also like: <a href="https://crypto.news/ethereum-foundation-eth-transfer/"> Ethereum Foundation makes $13.3m ETH transfer, prompting market speculation </a> 
<h2 class="wp-block-heading" id="strong-no-funds-lost-strong">No funds lost</h2> 
At the time of writing, the foundation said it had gained control of the compromised email address. As per the foundation’s investigation, no funds were lost in the attack. 
“Analyzing on-chain transactions made to the threat actor between the time they sent out the email campaign and the time the malicious domain got blocked appear to show that no victims lost funds during this specific campaign sent by the threat actor,” the foundation noted. 
The foundation also discovered that the hacker had uploaded a database containing email addresses that were not part of the Foundation’s subscribers list. As a result, several users who have not subscribed have also received the scam email. 
The attacker also exported the “blog mailing list email addresses” containing 3,759 email addresses. However, the list contained only 81 email addresses, and the rest were “duplicate addresses.” 
As such, it was estimated that the attack compromised the email addresses of 81 subscribers. 
Meanwhile, the foundation has also reached out to several wallet providers, blacklists, and DNS provider Cloudflare urging these platforms to warn users if they are redirected to the malicious website.&nbsp; 
The cryptocurrency industry is no stranger to phishing schemes via email.&nbsp; 
In early June, several key crypto figures <a href="https://crypto.news/major-crypto-email-vendor-comprised/">warned of a prominent email vendor</a> being compromised and users receiving scams promoting fake airdrops. Prior to that, the <a href="https://crypto.news/cointelegraph-others-sent-phishing-emails-in-presumed-hack/">email addresses of several prominent crypto-related entities</a> were used to send phishing emails. 
 Read more: <a href="https://crypto.news/ethereums-1-year-revenue-tops-the-charts-reaching-2-7b/"> Ethereum’s 1-year revenue tops the charts, reaching $2.7b </a>

Ethereum Foundation’s email hacked to promote bogus Lido staking scam

Table of Contents

crypto.news

Other articles published on Jul 3, 2024

Top 4 Crypto Projects Revolutionizing Web3 Gaming

Airdrop Insights: Free Tokens for All

Hold Your Crypto Horses! Denmark Clarifies: No Ban on Self-Custodial Cryptocurrency Wallets

New Meme Coin Shiba Shootout Nears $500K in Presale – Will SHIBASHOOT Explode?

Crypto Investors Place $500 Million In Spot Bids For Bitcoin And This Ethereum Token Pop 67⁶ are

WELL3 Announces WELL Token Listing on Bybit, Bitget and Gate.io

Join our free newsletter for daily crypto updates!