Ethereum phishing attack that earns $15K in two hours

  • 397
  •  
  •  
  • 1
  •  
  •  
  •  
    398
    Shares

Wesley Neelen (security researcher) has received a phishing email that seems to be from the legal online Ethereum wallet site Myetherwallet.com.

Cybercriminals are trying to get the login credentials for all type of accounts through phishing emails. By tricking possible victims to enter their username and password on a fake website (legitimate-looking), the attackers are able to obtain to confidential data and/ or financials for their personal gain.

According to the phishing e-mail:
“We have pushed an update that allows smooth sailing for all the MyEtherWallet users in the process of the upcoming hard fork. To make use of this update we request all users to sign in to their MyEtherWallet accounts and synchronize their wallets for continuous undisturbed use of our services.”

This scam states that Myetherwallet implemented an update and that they want users to click on an embedded link, unlock their account, and confirm their balances.

If someone clicked on the link they would be taken to a website that seemed identical to the legitimate Myetherwallet.com site. Users also may have seen something strange, which is a small comma underneath the letter “t” in the address bar. The attackers used a Unicode trick that enables them to register domains that contain Unicode characters that look very similar to Latin characters.

If someone wrote their wallet password, the attackers would use this password to access the victim’s wallet and send the coins to their own wallet.

The following two tabs change content below.
Avatar

Unallocated Author

Please note that the article you are reading has an unallocated author as the original author is no longer employed at latesthackingnews.com, this has been put in place to adhere with general data protection regulations (GDPR). If you have any further queries, please contact: [email protected]
Avatar

Unallocated Author

Please note that the article you are reading has an unallocated author as the original author is no longer employed at latesthackingnews.com, this has been put in place to adhere with general data protection regulations (GDPR). If you have any further queries, please contact: [email protected]

Do NOT follow this link or you will be banned from the site!