Cryptocurrency users have received warnings to remain vigilant due to ongoing supply chain attacks targeting the digital asset industry through email newsletters.
Tether CEO Paolo Arduino I alerted users to a hacked email vendor used by several digital asset service providers. The identity of the seller was not revealed and investigations into the matter are still ongoing.
CoinGecko co-founder and COO Bobby Ong confirmed the same breach occurred. Arduino and Ong warn that a wave of phishing email scams promoting the distribution of malicious airdrops or the release of a token may soon target users.
“CoinGecko token was not planned, so don't be fooled by phishing emails,” Ong said on X. A few users on social media have also reported suspicious messages from providers like Binance. Crypto.news also confirmed that cryptocurrency exchange Bitfinex was among the affected companies.
The issue of crypto phishing is not new
Like other participants in the digital space, users of digital assets have dealt with constant attacks from bad actors trying to access funds and steal funds. A similar case occurred in January when several company emails were hijacked, including those from Cointelegraph, Trezor, Token Terminal, WalletConnect, and others.
Nansen customers reported phishing emails last November after a third-party vendor leaked. In early 2023, scammers hacked the domain registrar Namecheap and bombarded MetaMask users with malicious emails.
Security experts and pundits have also called on platforms like Google to tighten their systems against bad actors who exploit unsuspecting users and victims.