While investigations are ongoing, the continuous attack on several crypto platforms could be linked to the hacking of Coinzilla, a digital marketing and advertising firm.
Etherscan and CoinGecko, two popular crypto analytics platforms, have both issued alerts about an ongoing phishing attack on their platforms.
Phishing attack tries to gain access to users’ funds by-
According to the data provided by the analytics firms, the latest phishing attack tries to gain access to users’ funds by requesting that they integrate their crypto wallets via MetaMask once they visit the official websites.
After numerous users reported unusual MetaMask pop-ups urging them to connect their crypto wallets to the website, the companies began investigating the attack.
Etherscan also disclosed that the attackers used third-party integration to display phishing pop-ups, and warned investors to avoid confirming any transactions requested by MetaMask.
“Any website that uses Coinzilla Ads is affected,” Crypto Twitter user @Noedel19 said, linking the ongoing phishing attacks to the Coinzilla, an advertising and marketing provider, breach.
The screenshots below demonstrate an automated pop-up from MetaMask urging you to connect with a link that falsely claims to be a non-fungible token (NFT) offering from Bored Ape Yacht Club (BAYC).
Crypto is still Vulnerable to phishing attacks
While official confirmation from Coinzilla is still pending, @Noedel19 believes that all organizations with Coinzilla ad integration are still vulnerable to similar assaults in which their users are blasted with pop-ups requesting MetaMask integration.
Etherscan has stopped the compromised third-party integration on its website as a key strategy of hardness values.
Coinzilla informed a platform within hours of the above development that the problem had been detected and fixed, and that the services had not been compromised:
“Our automatic security checks were able to pass a single ad with malicious code. Our team stopped it and locked the account after it ran for less than an hour.”
On April 25, the crypto-based platform claimed that hackers had gained access to BAYC’s official Instagram account. The hackers then emailed BAYC’s Instagram followers with fake airdrop URLs.
Users who connected their MetaMask wallets to the scam website had their Ape NFTs depleted. According to unconfirmed reports, the phishing attack resulted in the theft of approximately 100 NFTs.
- KBR Stock Forecast: Is the Stock (NYSE: KBR) Capable To Bag More? - September 27, 2023 1:27 pm EDT
- IMB Stock Price: Bears Are About to Make a Breakout, What’s Next? - September 27, 2023 12:16 pm EDT
- Lucid Stock Price Defends $5; Will LCID Stock Reverse Upward? - September 27, 2023 11:16 am EDT