Malware spreads fake wallet seed phrase via hacked mailing lists

avatar
MarsBit
04-07
This article is machine translated
Show original
Mars Finance News: Recently, network security experts discovered a dual malicious software attack targeting users both inside and outside the cryptocurrency industry. The network intelligence company Silent Push revealed a malicious activity called PoisonSeed, which first forged login pages of bulk email service providers like Mailchimp and SendGrid to steal user credentials. The attackers sent fake emails claiming that user accounts were restricted, tricking users into logging into highly imitative websites. After users entered their credentials, the attackers quickly and automatically exported email subscription lists. Subsequently, using the stolen subscription lists, the attackers impersonated Coinbase and sent phishing emails to the victims' contacts, claiming that the exchange was "transitioning to self-hosted wallets" and including a 12-word seed phrase, attempting to trick users into importing wallets and ultimately allowing hackers to control their assets. (Decrypt)

Source
Disclaimer: The content above is only the author's opinion which does not represent any position of Followin, and is not intended as, and shall not be understood or construed as, investment advice from Followin.
Like
Add to Favorites
Comments
Followin logo