#phishing

Security company SlowMist has analyzed reports of stolen cryptocurrency assets for the second quarter of 2024, which were collected through the MistTrack platform. This analysis only considered hack reports submitted via the official form, identifying three primary attack methods: theft of private keys, the use of fake crypto wallets, and phishing.

Blockchain researcher ZachXBT recently reported the successful return of most funds obtained from selling a DeGods NFT stolen in May 2023. The NFT was pilfered through a phishing website and promptly sold for 99 ETH (valued at $177,000) on the NFT marketplace Blur.

Trader Joe, a decentralized exchange, alerts users to the danger of stumbling upon fake websites through Google searches, which masquerade as the exchange itself, often popping up as advertised links in search results.

The fake Blockworks site presents a fabricated ‘BREAKING’ news report, alleging a multimillion-dollar ‘approvals exploit’ on Uniswap.

Crypto analytics platform Nansen revealed a security breach stemming from a compromised third-party vendor. This breach led to the exposure of emails, password hashes, and some blockchain addresses for 6.8% of its users. The attacker gained admin access to an account used for customer platform access. Nansen has reached out to affected users, urging password changes and caution against phishing attacks.

Security company PeckShield has issued a warning to users about a phishing attack conducted by a scammer who has stolen over $675,000 in the past five days. He exploits USDT token permissions. Users are therefore advised to promptly verify and revoke any suspicious accesses to safeguard their assets.

Blockchain security company Match Systems has identified several developers behind the phishing app Angel Drainer, which promptly ceased operations. Preliminary assessments indicate that at least 35,000 users lost around $25 million due to Angel Drainer's activities.

The North Korean hacking group Lazarus is now impersonating the CEO of Fenbushi Capital, a Chinese digital asset management company, to launch phishing attacks on LinkedIn users, reports cybersecurity firm SlowMist.

MailerLite, an email marketing platform, has confirmed a security breach leading to the distribution of phishing emails. These fraudulent emails, mimicking various crypto companies, affected 117 entities, including names like WalletConnect, Token Terminal, and the crypto news platform Cointelegraph.

According to cybersecurity firm SlashNext, generative AI tools like ChatGPT are now being exploited by threat actors to craft highly sophisticated and targeted phishing emails.

The saga continues for the account holders of the bankrupt FTX cryptocurrency exchange as phishing threats resurface. Emails, claiming to provide a shortcut for fund withdrawals without the legal red tape, are being sent.

The company Blockaid preemptively identified a perilous phishing website targeting Ethereum's co-founder admirers, even before Buterin's account was hacked. This was attested by MetaMask, who also pointed out the integration of Blockaid's anti-phishing solution within their wallet for enhanced user protection.

Official web portals from various jurisdictions, including India, Nigeria, Egypt, Colombia, Brazil, and Vietnam, are funneling users to a bogus MetaMask website. Visitors receive a phishing warning from Microsoft Defender the moment they access the site. Ignoring this alert and connecting one's MetaMask could result in catastrophic loss of funds.The fraudulent website is depicted beside the authentic one in a screenshot.

After detecting phishing attempts, Terra (LUNA) has temporarily frozen its primary domain, Terra․money. The company's directive? Avoid sites with this domain until they say otherwise. While the team has ramped up protection for the Station Wallet, a word of caution: avoid the desktop and mobile apps for a bit. But if you're a fan of the Station Chrome extension, the latest version is good to go.

A user fell victim to a 'Zero Transfer Phishing' scam, losing $20 million USDT. These malicious parties imitated a few characters in the wallet address to deceive the unsuspecting victim. Fortunately, Tether reacted swiftly and froze the assets in just 50 minutes.Always stay vigilant when copying wallet addresses from transaction records.Scammers create custom smart contracts to generate look-alike addresses and dupe potential victims. Correct Address: 0xa7B4BAC8f0f9692e56750aEFB5f6cB5516E90570 Phishing Address: 0xa7Bf48749D2E4aA29e3209879956b9bAa9E90570