Popular crypto analytics platforms Etherscan and CoinGecko have parallelly issued an alert against an ongoing phishing attack on their platforms. The firms began investigating the attack after numerous users reported unusual MetaMask pop-ups prompting users to connect their crypto wallets to the website.
Based on the information disclosed by the analytics firms, the latest phishing attack attempts to gain access to users’ funds by requesting to integrate their crypto wallets via MetaMask once they access the official websites.
Security Alert: If you are on the CoinGecko website and you are being prompted by your Metamask to connect to this site, this is a SCAM. Don't connect it. We are investigating the root cause of this issue. pic.twitter.com/7vPfTAjtiU
— CoinGecko (@coingecko) May 13, 2022
Etherscan further revealed that the attackers have managed to display phishing pop-ups via third-party integration and advised investors to refrain from confirming any transactions requested by MetaMask.
We’ve received reports of phishing popups via a 3rd party integration and are currently investigating.
— “The Etherscan” (@etherscan) May 13, 2022
Please be careful not to confirm any transactions that pop up on the website.
Pointing toward the possible cause of the attack, @Noedel19, a member of Crypto Twitter, connected the ongoing phishing attacks to the compromise of Coinzilla, an advertising and marketing agency, stating that “Any website that makes use of Coinzilla Ads are compromised.”
The screenshots shared below show the automated pop-up from MetaMask asking to connect with the link falsely portraying as Bored Ape Yacht Club’s (BAYC) non-fungible token (NFT) offering.
On May 4, Cointelegraph further warned readers about the rise in Ape-themed airdrop phishing scams, which is further cemented by the latest warnings issued by Etherscan and CoinGecko.
While an official confirmation from Coinzilla is still underway, @Noedel19 suspects that all companies that have ad integration with Coinzilla remain at risk of similar attacks wherein their users get pop-ups for MetaMask integration.
As a primary means of damage control, Etherscan has disabled the compromised third-party integration on its website.
Coinzilla has not yet responded to Cointelegraph’s request for comment.
Related: Bored Ape Yacht Club NFTs stolen in Instagram phishing attack
The team behind BAYC recently warned investors about an attack after hackers were found to breach their official Instagram account.
There is no mint going on today. It looks like BAYC Instagram was hacked. Do not mint anything, click links, or link your wallet to anything.
— Bored Ape Yacht Club (@BoredApeYC) April 25, 2022
As Cointelegraph reported on April 25, hackers were able to gain access to BAYC’s official Instagram account. The hackers then contacted BAYC’s Instagram followers and shared links to fake airdrops.
Users who connected their MetaMask wallets to the scam website were subsequently drained of their Ape NFTs. Unconfirmed reports suggest that approximately 100 NFTs were stolen during the phishing attack.
Of the 27 Ethereum ETFs in the world, 20 are Ethereum spot ETFs and 7 are Ethereum futures ETFs. The top 10 global Ethereum ETFs all trade in Canada or Europe.
JinseFinanceBinance remains the largest centralized exchange (CEX) with a market share of 43.7%. The second largest centralized exchange is Upbit with a market share of 9.3%. OKX is the third largest exchange in 2023 with a market share of 6.7%.
JinseFinanceCrypto scammers execute a $58M heist via phishing campaigns on Google and X ads, utilizing a 'Wallet Drainer' and evading detection with regional targeting and redirect tricks.
Hui XinStarting January 29, 2024, Google will implement updated advertising policies for the cryptocurrency industry. Taking Taiwan as an example, advertisers will need authorization from Taiwan's Financial Supervisory Commission to place advertisements.
OliveGoogle's January 2024 policy update tightens rules for cryptocurrency trust ads, introducing stricter certification. This move emphasizes Google's commitment to credible, legal, and transparent financial advertising, protecting consumers in the booming digital currency era.
Xu LinJinseFinanceThe crypto data platform plans to integrate new endpoints into its crypto data API by Q2 2024, covering various aspects of NFT data across major platforms.
DavinJanuary 2023 has been the second worst month for crypto layoffs as a new wave of redundancies hit the industry, with as many as 2,806 people losing their jobs.
decryptThe upcoming ETH Merge remains a highly anticipated and hyped event in the crypto space.
BitcoinistThe new rules, which took effect this week, require crypto operators to display clear risk warnings on ads and prohibit the inclusion of false or exaggerated information about companies.
Coindesk