Official email addresses of popular cryptocurrency bitcoin firms have sent phishing links to their audiences through a fake airdrop, stealing almost $580,000 at press time.
News outlet Cointelegraph, data platform Token Terminal, bridge provider Wallet Connect, and software firm DeFi were among the firms targeted by Hackers.
Each company featured different promotions in emails to users. DeFi was supposedly launching staking options, WalletConnect said it wanted to reward customers, and an airdrop for Cointelegraph’s tenth anniversary was used to disguise the phishing link.
“We hope this email finds you well and thriving in the world of decentralized finance!” wrote hackers imitating WalletConnect. Cointelegraph’s email opens with the same sentence — just without an exclamation mark.
Community Alert: Phishing emails are currently being sent out that appear to be from CoinTelegraph, Wallet Connect, Token Terminal and DeFi team emails. ~$580K has been stolen so far0xe7D13137923142A0424771E1778865b88752B3c7 pic.twitter.com/XoN65HxOYh— ZachXBT (@zachxbt) January 23, 2024
Read more: Hackers target MacOs users through pirated apps that steal crypto
The associated wallet address has received almost $580,000 from unsuspecting victims. Several shared that their crypto was taken in reply to sleuth ZachXBT on X (formerly Twitter), whose post spread awareness of the coordinated Hack.
WalletConnect has since launched an investigation into the fake airdrop. “We can confirm that this email was not issued directly from WalletConnect or any WalletConnect affiliates,” it said on X. Other affected crypto companies have issued similar confirmations.
DeFi stated that hackers may have gained access to its email addresses through third-party email service provider Mailer Lite. “We are already moving our databases to another provider to ensure further safety of our users,” it said.
MailerLite has not posted about its involvement, but experienced a major outage on January 11.
Got a tip? Send us an email or ProtonMail. For more informed news, follow us on X, Instagram, Bluesky, and Google News, or subscribe to our YouTube channel.