Posts

Showing posts with the label phishing

Celsius users targeted by phishing as restructuring nears

Image
Bad actors have flooded X, impersonating the bankruptcy claim agent for Celsius to scam claimants. Celsius users are targeted by a potential phishing email attack as the final court approval of its restructuring plan is anticipated on Oct. 2. Several users reported on X they had received phishing emails pretending to be from Stretto, the Claims Agent for the Celsius bankruptcy proceeding. A phishing email pretending to be sent by Stretto to Celsius claimants | Source: BleepingComputer One of the phishing emails shared with BleepingComputer was offering a creditor a 7-day exit window to claim their crypto frozen on Celsius. According to the details, the letter was sent using the address no-reply@stretto[.]com and passed Sender Policy Framework (SPF) checks. The report also says the email includes a link that routes victims to the phishing website claims-stretto[.]com, registered on Sept. 19, 2023. You might also like: Former Celsius executive pleads guilty to pri...

North Korean hackers stealing NFTs using nearly 500 phishing domains

Image
The hackers created decoy websites impersonating NFT marketplaces, NFT projects and even a DeFi platform. Hackers linked to North Korea’s Lazarus Group are reportedly behind a massive phishing campaign targeting non-fungible token (NFT) investors — utilizing nearly 500 phishing domains to dupe victims. Blockchain Security firm SlowMist released a report on Dec. 24, revealing the tactics that North Korean Advanced Persistent Threat (APT) groups have used to part NFT investors from their NFTs, including decoy websites disguised as a variety of NFT-related platforms and projects. Examples of these fake websites include a site pretending to be a project associated with the World Cup, as well as sites that impersonate well-known NFT marketplaces such as OpenSea, X2Y2 and Rarible. SlowMist said one of the tactics used was having these decoy websites offer “malicious Mints,” which involves deceiving the victims into thinking they are minting a legitimate NFT by connecting their wallet to the...