Ethereum

Based

when

Foundation

The mailing list provider for the Ethereum Foundation blog was compromised on Sunday. The attackers sent out an email with a phishing link. Ethereum developer Tim Beiko <a href="https://x.com/TimBeiko/status/1804693090944553186" rel="noopener noreferrer nofollow" target="_blank">alerted</a> users to the breach and warned them not to click on any link in the email.
Also read: <a href="https://www.cryptopolitan.com/sec-ends-all-investigations-into-ethereum/" rel="noopener noreferrer nofollow">SEC permanently ends all investigations into Ethereum</a>
However, Ethereum Foundation might not be the only crypto entity affected by the breach. One Ethereum investor <a href="https://x.com/fivedogit/status/1804694756435407236" rel="noopener noreferrer nofollow" target="_blank">noted</a> that he got an identical mail through an address he registered with on-chain data provider Nansen.
<h2 id="ethereum-foundation-regains-control">Ethereum Foundation regains control</h2>
Based on the <a href="https://x.com/TimBeiko/status/1804721462407725441" rel="noopener noreferrer nofollow" target="_blank">latest update</a> from Beiko, the foundation has regained control of the email list and locked out all external access. To confirm this, the foundation sent a new mail alerting recipients about the previous email and telling them to ignore it. The new email read:
<blockquote>
 “Approximately 1 hour ago, you will have received an email titled “Now Available: Ethereum Foundation Staking Platform.” This email was not sent by us, the account we use to send these emails was compromised. We believe the issue is now contained. Please delete the previous email and DO NOT click any links in that email.”
</blockquote>
However, none of the stakeholders have provided any information on how the breach happened or its extent. The mailing list provider SendPulse did not make any statement on the issue, with the last post on its Twitter account being in September 2023.
So far, there has not been any report of people losing their assets after opening the email. Most people quickly <a href="https://x.com/lisacheng/status/1804746777914118329" rel="noopener noreferrer nofollow" target="_blank">noticed</a> something suspicious about an email from the Ethereum Foundation blog asking subscribers to stake ETH with Lido.
<h2 id="email-service-providers-are-becoming-prime-targets-for-hackers">Email service providers are becoming prime targets for hackers</h2>
This is not the first time hackers have targeted an email service provider for a crypto entity. Bad actors have targeted third-party email management services for several years, but efforts have intensified recently.
Earlier this month, thousands of CoinGecko users received phishing emails after its email service provider, GetResponse, experienced a data breach. CoinGecko <a href="https://www.coingecko.com/learn/getresponse-data-breach-june-2024" rel="noopener noreferrer nofollow" target="_blank">confirmed</a> the incident, noting that the hackers exported the contact information of 1.9 million users.
Also read: <a href="https://www.cryptopolitan.com/the-rising-tide-of-crypto-phishing-attacks/" rel="noopener noreferrer nofollow">Industry giants rally against the rising tide of crypto phishing attacks</a>
Citing the publication on its website, “The attacker exported 1,916,596 contacts from CoinGecko’s GetResponse account and sent phishing emails to 23,723 emails from another GetResponse client’s account (alj.associates).”
Using this tactic, malicious actors can easily send emails containing phishing links to thousands. Depending on the type of phishing deployed, those who click on the link may give sensitive information to scammers or be tricked into sending funds to fraudulent addresses that look like their real ones through address spoofing. Sometimes, users even unknowingly authorize scammers to execute transactions on their behalf when they click on the phishing link.

Ethereum Foundation alerts community to phishing email threat

Innholdsfortegnelse

Cryptopolitan_News

Andre artikler publisert på 24. juni 2024

Tether on Tron Outpaces Visa’s Daily Trading Volume, German Bank Appoints Bitcoin Advocate as CEO

BioMatrix Launches Proof of You (PoY) AI Tokens: The World's First Free-For-Life AI Tokens (24 Jun)

Bitcoin Double Top Formation Raises Alarm Bells for Investors

Moonbag- Top Meme Coin Presale in 2024: Solana & Polkadot Value Drops as MoonBag Presale Shoots t...

Global Excitement Strengthens MoonBag Meme Coin Pursuit of $1 by 2025: Soars Ahead of Hedera and ...

Mt. Gox Prepares to Pay Investors $9 Billion in Bitcoin and Bitcoin Cash

Bli med på vårt gratis nyhetsbrev for daglige kryptooppdateringer!