Recent investigations have revealed that several companies dealing with Web3 technologies have been targeted in a sophisticated phishing attack. Suspicion falls on the email service provider Mailer Lite, which is used by some of the affected companies.
In this attack, fraudsters focused on users in the #crypto community, pretending to be Web3 companies. ZachXBT, an on-chain detective, pointed out phishing emails that appeared to be sent from legitimate sources, including decentralized applications and various crypto platforms.
Details of the Phishing Attack
#ZachXBT published screenshots showing that the emails contained offers for fake token airdrops, enticing users to click on fraudulent links. These emails, diverse in content, had the same goal.
#WalletConnect users were offered the chance to participate in a "special opportunity" as a thank you to the community, while Token Terminal users were informed about free tokens as part of celebrating a new milestone. De.Fi users were told that the airdrops were related to the launch of new features on their platform. Cointelegraph was allegedly celebrating its tenth anniversary.
Victims and Responses of Affected Companies
ZachXBT warned that fraudsters stole more than $580,000 from users who clicked on these links. The phishing emails were very convincing because they used email addresses similar to the real ones.
As information about the phishing attacks spread, the affected companies issued statements denying any connection to the attacks and warning users against interacting with suspicious links. WalletConnect, Cointelegraph, and Token Terminal clearly denied any involvement with the airdrops mentioned in the emails.
Investigation and Security Measures
The investigation is still ongoing, but De.Fi identified Mailer Lite as a possible source of the problem. In response, De.Fi stated that they are moving their databases to another provider to increase the security of their users.
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“