Although last week proved horrible for cryptocurrency owners with the market facing a crash and Binance’s outage during that difficult time, the nasty phishing attacks designed having pop-ups target metaverse users on famous crypto sites. So far, multiple sites, including Etherscan and DexTools, have reportedly confirmed the crypto scam ad and issued alerts not to connect wallets.
CoinGecko issued a scam alert via a tweet on May 14, which reads:
Security Alert: If you are on the CoinGecko website and you are being prompted by your Metamask to connect to this site, this is a SCAM. Don’t connect it. We are investigating the root cause of this issue.
Related Reading | LUNA Investors ‘Suicidal’ After Crypto’s Collapse – Do Kwon Says He’s ‘Heartbroken’
Scammers behind the phishing attack faked that users would access the most significant NFT avatar, Bored Ape Yacht Club, by clicking on the provided link. And to make it real, the pop-ups featured an ape skull logo alongside the now-defunct domain, nftapes.win. Per the WHOIS lookup, the domain from where phishing attacks were being generated was registered on Friday, around 3:00 PM. ET.
The ad required users to connect their MetaMask wallets to use it on the site. Web 3.0 technology allows MetaMask wallets to authorize access to websites via smartphones and browser extensions. And since the fraudsters managed to place dodgy advertising scripts on reputational sites which have a trusted relationship with their audiences, many users fell into the trap and provided access to their wallets.
Elaborating the cause behind this situation, CoinGecko affirmed:
Update: The situation is caused by a malicious ad script by Coinzilla, a crypto ad network – we have disabled it now but there may be some delay due to CDN caching. We are monitoring the situation further. Do stay on alert and don’t connect your Metamask on CoinGecko.
Since the crypto sector has become the favorite choice of cybercriminals, last November, they conducted a phishing attack via Google Ads to steal users’ credentials and make them log in to the attacker’s wallet so that he can receive transactions committed from the victim’s wallet. Similarly, hackers stole $1.7 million worth of NFTs targeting OpenSea in February and $18,000 in the most recent attack via Discord.
Related Reading | OpenSea Confirms Phishing Attack Affecting Multiple Users, Here Are The Facts
As the publications discovered the fraud, Etherscan temporarily blocked the integration with third parties. Additionally, Dex Tools notified its community that Coinzilla, an advertising network that claims to deliver over 1 billion impressions monthly across 600 reputable crypto sites, became the source of the recent phishing attack.
Dex Tool tweeted;
We are disabling all ads until the situation is clarified by @adsbycoinzilla . Please be aware and don’t sign suspicious requests at your wallet. DEXTools does not automatically request any permissions.
Featured image from Pixabay and chart from TradingView.com
Renzo is a restaking protocol built on the Ethereum blockchain. It allows users to easily stake their ETH and earn rewards from EigenLayer. Renzo has a strong founding team and is backed by Binance Labs, but its REZ token has experienced a recent price decline.
WeatherlyScandal-hit Filipina mayor denies espionage claims, faces investigation and party expulsion amid massive fraud allegations.
Alex丑闻缠身的菲律宾市长否认间谍指控，在大规模欺诈指控中面临调查和开除党籍。
AlexFriend.Tech has seen over $1M TVL loss in less than 24 hours. And plans to leave the Base network for its own chain, followed by news of a reversal, further destabilised the FRIEND token, hitting a new all-time low. Is it time to say goodbye to Friend.Tech?
KikyoSouth Korea's new crypto monitoring system, launching July 19, aims to curb illicit activities and enhance market oversight, potentially impacting global crypto markets amid concerns over altcoin delistings and investor protection.
JoyIlya Sutskever, co-founder of OpenAI, left amidst disagreements over AI safety priorities, leading to the founding of Safe Superintelligence Inc. (SSI) in June 2024, focusing on developing safe superintelligence with a streamlined approach and a select team.
AnaisAlexPixelverse's PixelTap game integrates a tap-to-earn model on Telegram, recently adding TON blockchain support for in-game transactions and $PIXFI token interactions, aiming to enhance player engagement and value creation within its cyberpunk universe. With rapid user growth, community events like Pixelfest, and substantial backing from investors, Pixelverse is positioned to expand as a prominent player in blockchain-based gaming and entertainment.
WeatherlyEthena made history with its USDe surpassing $3B just four months after launch. Its Sats campaign will continue until 2 September or until USDe supply reaches $5B. However, the ENA token has declined over 50% in the past month. Will Ethena's USDe follow the path of other high-profile stablecoin collapses?
CatherineQED Protocol, backed by $9 million in funding, enhances Bitcoin with scalable smart contracts using zero-knowledge proofs, aiming for faster transactions and broad Web3 application support. Led by Carter Feldman, QED aims to revolutionize Bitcoin's capabilities, potentially making it a cornerstone of the next-gen internet.
Weatherly