Phishing scam pop-up targets MetaMask users visiting popular crypto sites

As if this week wasn’t bad enough for many cryptocurrency holders, with the stablecoin crash and Coinbase failure at a particularly bad time, they have now reportedly become the target of a new phishing attack. As reported by CoinDesk and The block cryptosites including ether scan, CoinGeckoand DexTools All warned users that they were aware of suspicious pop-ups appearing for visitors and advised them not to confirm transactions based on pop-ups.

Like many recent phishing attacks, this one seemed to promise a link to the Bored Ape Yacht Club project with a monkey skull logo and a (now-defunct) domain. It urged users to connect their MetaMask wallets (a software cryptocurrency wallet that allows access on your phone or via a browser extension) for use on the site, and since it appeared on domains that many people trust and the they use every day, they may have fallen for it and granted it access.

Last November, security firm Check Point Research identified a phishing attack using Google Ads that either attempted to steal someone’s credentials or trick them into logging into the attacker’s wallet so they could steal all attempted transactions. In February, a phishing attack stole $1.7 million worth of NFTs from OpenSea users, while a more recent attempt via Discord only stole $18,000 worth of tokens.

Etherscan said it has disabled third-party integrations for now. A tweet from CoinGecko identified the source of the malicious pop-up as Coinzilla, an industry ad network that told clients it could serve over 1 billion impressions per month on more than 600 reputable websites popular with crypto enthusiasts. Phishing scam pop-up targets MetaMask users visiting popular crypto sites

Fry Electronics Team

Fry is an automatic aggregator of the all world’s media. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials, please contact us by email – The content will be deleted within 24 hours.

Related Articles

Back to top button