Skip to main content

MetaMask users in danger

A new phishing bot is up to mischief in crypto Twitter. He is targeting the private keys of users of the MetaMask browser wallet.

Users of the popular browser wallet MetaMask have to be careful. Fraudsters are currently trying to lead unsuspecting users onto black ice or into crypto ruin. On Twitter, the MetaMask team is warning of a new phishing bot that is currently circulating on social media. Fake tweets lead MetaMask users seeking help to a fake MetaMask support page consisting of a Google document. In it, the users are asked to reveal their seed phrase. The private keys that a wallet manages can be restored from this. If you reveal your seed phrase, you are de facto relinquishing control of your cryptocurrencies.


MetaMask via Twitter

The trick seems to have worked for at least one user. @ Sheiko14 reports 1.5 ETH that disappeared from their wallet.

MetaMask Phishing Bot: Not the first, not the last

It is not without a certain irony that the new MetaMask Phishing Bot answered your question as to whether you could get the stolen ETH back. The same applies to the form with which the scammers want to access the MetaMask seed phrases and passwords. Because there is the standard notice that you should not transmit passwords.


One thing is certain: It is not the first and also not the last phishing scam with which crypto users are supposed to be deprived of what they have learned. Whatever the bait - be it a fake browser extension or bogus emails from support teams - it is ultimately all about the literal key to the victim's crypto fortune. “Not your keys, not your coins” is therefore a motto that every owner of cryptocurrencies should keep in mind.

Comments

Popular posts from this blog

From offchain to offchain: Statechains meets Lightning

  Without a doubt, the most significant off-chain Bitcoin solution is the Lightning network. But in its wake, the statechain has emerged as an intriguing replacement. There is currently a proposal to link the two offchain networks. From an ocean, for example, you can see sunbeams glistening in the water, waves rippling, and possibly a jellyfish drifting toward the light. But you only see a small portion of it. The distance from the sea's surface to its bottom is hundreds of meters. It has dozens of different fish species swimming in it, crabs and starfish crawling on the bottom, shells clinging to rocks, and sea plants climbing up. A completely new world starts where your gaze diverges. You can picture a blockchain like Bitcoin, just like the sea. What you see on the outside is only a small portion of what is actually there; the set of UTXOs (coins) and transaction history that full nodes store are just the beginning of a much larger world. It's the plan, at least. With Bitcoin

MSP Recovery and Tokenology aim to optimize healthcare with the help of Polygon

  MSP Recovery LLC, a Miami, US-based healthcare provider with an estimated enterprise value of $32.6 billion, is partnering with Web3 company Tokenology to jointly launch a new blockchain platform called Lifechain. Lifechain wants to leverage the verifiable and transparent nature of blockchain technology to aggregate medical care claims, medical expense reports and patient data and streamline their processing. For this purpose, MSP Recovery launched its own LifeWallet in January, which already has 1 million users. In addition to the wallet and blockchain platform, an associated crypto token called LifeCoin is also used. The press release explains that the primary purpose of the system is to enable secondary healthcare providers to more effectively bill health insurance companies for their costs. “The number of medical claims tokenized going forward will surpass $50 million per day by 2024. For this we need scalability, security and sustainability, which we have only found with Polygon

Phishing attack on popular crypto sites tries to empty wallets

  Several major crypto sites such as Etherscan, CoinGecko, DeFi Pulse, and others report malicious pop-ups scammers use to try to trick users into connecting their MetaMask wallets. The phishing attack came from a domain displaying the Bored Ape Yacht Club (BAYC) logo. "We are investigating the root cause of this attack to fix the threat as soon as possible," CoinGecko founder Bobby Ong tweeted. The phishing attack appears to have been triggered by a malicious ad script from Coinzilla, a crypto ad network, according to CoinGecko. Etherscan also advises its users not to confirm any transactions that may appear on the website. The attackers attempted to use the hype around the “bored monkeys” non-fungible tokens (NFT) to gain access to the cryptocurrencies of unsuspecting website visitors. Although the websites affected by the scam attempt have reacted in the last few hours and deactivated the advertising pop-up, it is still recommended not to connect your MetaMask wallet to ne