Close Menu

    Subscribe to Updates

    Get the latest creative news from FooBar about art, design and business.

    What's Hot

    Darknet market Abacus may be gone for good after BTC move

    July 1, 2025

    Senate passes Trump’s massive budget bill, with no mentions of crypto or Bitcoin

    July 1, 2025

    Whales dominate Plasma launch

    July 1, 2025
    Facebook X (Twitter) Instagram
    Tuesday, July 1
    • About
    • Contact us
    • Privacy Policy
    Facebook X (Twitter) LinkedIn YouTube
    Blockchain Echo
    Banner
    • Lithosphere News Releases
    • Bitcoin
    • Crypto
    • Ethereum
    • Litecoin
    • Altcoins
    • Blockchain
    Blockchain Echo
    Home ยป blog.ethereum.org mailing list incident | Ethereum Foundation Blog
    Ethereum

    blog.ethereum.org mailing list incident | Ethereum Foundation Blog

    Sophia BrownBy Sophia BrownJanuary 25, 2025No Comments2 Mins Read
    Facebook Twitter Pinterest LinkedIn Tumblr Email
    Share
    Facebook Twitter LinkedIn Pinterest Email


    On 2024-06-23, 00:19โ€ฏAM UTC, a phishing email was sent out to 35,794 email addresses by [email protected] with the following content

    Users who clicked the link in the email were sent to a malicious website:

    This website had a crypto drainer running in the background, and if a user initiated their wallet and signed the transaction requested by their website their wallet would have been drained.

    Our internal security team immediately launched an investigation to help determine who launched the attack, what the aim of the attack was, when it happened, who was affected, and how it happened.

    Some of the intial actions taken were:

    • Prevented the threat actor from sending additional emails.
    • Sent out notifications via twitter and email to not click the link in question.
    • Closed down the malicious access path the threat actor had used to obtain access into the mailing list provider.
    • Submitted the malicious link to various blacklists, and it was then blocked by majority of web3 wallet providers and cloudflare.

    Our investigation into the attack showed that:

    • The threat actor imported a large email list of their own into the mailing list platform to be used for the phishing campaign.
    • The threat actor exported the blog mailing list email addresses, which was a total of 3759 email addresses.
    • When we compared the emails in the email list that the threat actor had imported, we could see that the blog mailing list contained 81 email addresses that the threat actor did not previously have knowledge of, and the rest were duplicate addresses.
    • Analyzing on-chain transactions made to the threat actor between the time they sent out the email campaign and the time the malicious domain got blocked, appear to show that no victims lost funds during this specific campaign sent by the threat actor.

    As we continue working on this incident, we have taken additional measures such as migrating some mail services to other providers, to further help reduce the risk of this happening again.

    We are deeply sorry that this incident occurred, and are working diligently with both our internal security team as well as external security teams to further help address and investigate this incident.

    Any questions can be directed to [email protected].



    Source link

    Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
    Previous ArticleSoSoValue token spikes following debut, $15m funding round
    Next Article More to learn on Litecoin ordinals, nft, inscriptions
    Sophia Brown

    Related Posts

    Katana mainnet launch nears as pre-deposit closes with $200M in active deposits

    June 30, 2025

    World Experience: Updates from the Next Billion Fellowship

    June 28, 2025

    World Experience: Updates from the Next Billion Fellowship

    June 28, 2025
    Leave A Reply Cancel Reply

    Top Posts

    ๐Ÿ Lunar New Year Scratch & Win Campaign Is Live with a Grand Prize of 8,888,888 VERSE (~$1800) | by Bitcoin.com | Jan, 2025

    January 24, 2025

    Trade VERSE/USDT on KuCoin to Earn your Share of $8400 in Rewards! | by Bitcoin.com | Jan, 2025

    January 24, 2025

    Boost Your Crypto: Up to 30% Cash Back! | by Bitcoin.com | Jan, 2025

    January 24, 2025
    Stay In Touch
    • Facebook
    • YouTube
    • TikTok
    • WhatsApp
    • Twitter
    • Instagram
    Latest Reviews

    Subscribe to Updates

    Get the latest tech news from FooBar about tech, design and biz.

    About Us

    Stay updated on the world of cryptocurrency
    Your one-stop source for daily crypto news and insights
    Blockchainecho.info: Your trusted daily crypto companion

    Most Popular

    ๐Ÿ Lunar New Year Scratch & Win Campaign Is Live with a Grand Prize of 8,888,888 VERSE (~$1800) | by Bitcoin.com | Jan, 2025

    January 24, 2025

    Trade VERSE/USDT on KuCoin to Earn your Share of $8400 in Rewards! | by Bitcoin.com | Jan, 2025

    January 24, 2025

    Boost Your Crypto: Up to 30% Cash Back! | by Bitcoin.com | Jan, 2025

    January 24, 2025
    Copyright ยฉ 2025
    • Home
    • Buy Now

    Type above and press Enter to search. Press Esc to cancel.