Phishing Scams Target BlockFi, FTX Users, Nearly $7 Million in Tokens and NFTs Stolen
Table of Contents
Table of Contents
Phishing Scam Targets BlockFi and FTX Creditors
Cybersecurity researcher Plum @Plumferno tweeted on the 23rd, summarizing a phishing scam highly relevant to creditors, where the address 0x…b38 has received nearly $7 million in cryptocurrency and NFTs within the past 5 days.
Plum believes this appears to be a sophisticated scam. After investigation, he discovered that the stolen wallet is closely related to BlockFi and FTX creditors, with hackers possibly stealing creditor emails from the email service Mailer Lite for phishing purposes.
The address has been marked as a phishing scam on Etherscan. This may be related to the recent surge in cryptocurrency market value and the continuous reports of creditors potentially receiving full compensation.
BlockFi, FTX, and Alameda Research reach a settlement, creditors may receive full compensation of $875 million
With the help of a few friends, I've uncovered a rather sophisticated ongoing phishing scam carried out by one of PinkDrainer's customers, with losses (so far) of nearly $7 million over the last 5 days.
The source? Fake BlockFi emails, offering settlement claims for users. pic.twitter.com/sCSNGtcHaA
— Plum (@Plumferno) March 23, 2024
BlockFi and FTX Creditor Emails Compromised Multiple Times
Plum stated:
The worst part is that most assets were stolen from dormant wallets. These individuals may have been affected by the BlockFi bankruptcy, as they haven't accessed their crypto assets for a long time, and some victims have not even realized their wallets were compromised.
According to The Block, nearly $4.5 million has flowed into the address since March 17, with subsequent sales of high-priced NFTs such as Mutant Apes and Otherdeeds.
Previously, FTX claims agent Kroll experienced a cybersecurity incident that led to the exposure of non-sensitive customer data of some claimants in the bankruptcy case.
Can FTX now withdraw claims? With Kroll's cybersecurity breach, users should be cautious and beware of phishing emails