CoinGecko’s X accounts compromised in phishing attack

[adinserter block=”2″]


Cryptocurrency data aggregator CoinGecko’s X (formerly Twitter) account and terminal were briefly compromised on Jan. 10.

As reported by CoinGecko, “We’re taking immediate steps to investigate the situation and secure our accounts.” The company warned that users should not “click on any links or engage with suspicious content.”

For a brief period on Jan. 10, a phishing scam link informing users of a CoinGecko token airdrop was posted to the firm’s X account. The post has since been deleted. 

On Jan. 9, the United States Securities and Exchange Commission’s X account was compromised, with scammers posting a seemingly genuine message from Chair Gary Gensler that the SEC had approved multiple applications of Bitcoin spot exchange-traded funds (ETFs). The post has since been deleted. No spot Bitcoin ETFs have been approved by the SEC at the time of publication.

In a post-mortem update of the SEC hack, X said that the breach was not due to any attacks affecting its infrastructure but instead the lack of two-factor authentication (2FA) tied to the SEC’s account. The incident was due to “an unidentified individual obtaining control over a phone number associated with the @SECGov account through a third party,” X’s Safety team wrote.

SIM-card swap attacks are an ongoing issue within the Web3 community and occur when imposters, posing as genuine owners of the account, contact telecommunications issuers to switch the victim’s phone service to a number they control, thereby gaining access to the victim’s social accounts bound to the phone number. In September 2023, Ethereum co-founder Vitalik Buterin’s X account was also breached in a phishing attack.

Related: What is two-factor authentication (2FA) and how to use it in crypto


Source link

[adinserter block=”2″]

Be the first to comment

Leave a Reply

Your email address will not be published.