Halborn warns of new phishing attack on MetaMask customers
Users receive emails with a link to a fake website where they are prompted to enter a seed phrase to confirm their identity
01.08.2022 - 08:15
686
2 min
0
What’s new? Users of MetaMask, a decentralized crypto wallet, are under the threat of phishing attacks. Fake messages are sent out on behalf of the company, asking them to provide a seed phrase on a third-party website, supposedly to confirm that the wallet belongs to the owner. The scammers then gain access to the victims’ accounts, reported representatives of Halborn, a blockchain security company.
A seed phrase is a key secret phrase needed to regain access to a cryptocurrency wallet. It is usually generated automatically when creating a wallet and contains 12, 18, or 24 words.
How does the attack work? Halborn’s technical education specialist Luis Lubeck reported that users receive emails with MetaMask logos telling them of the need to comply with the KYC procedure. When attempting to go to a page with the verification procedure, a fake website opens asking the user to enter a seed phrase. After entering the phrase the victim is redirected to the real MetaMask website, which misleads the user, but by that time the scammers have already accessed the wallet and stolen money.
Lubeck emphasized that there are several alarming signals in such emails at once. Firstly, there are spelling errors. Secondly, a fake email address (it may differ from the original one by just one letter). Thirdly, is the lack of personalization when contacting users.
Experts do not recommend following the link contained in the email — in this case, it is safer to visit the official website and find the desired page on it.
In June, Halborn reported that MetaMask and Phantom wallets fixed a critical vulnerability in a browser software extension. Seed phrases generated by wallet providers were stored on users’ computers in plain text as part of the “Restore Session” feature. This meant that attackers could get into the system using malware or physical access.
Useful material?
Telegram 
Twitter Incidents
The search, the reason for which was not announced, took place a week after the election, the results of which Polymarket users predicted quite accurately
Nov 14, 2024
Market
Analysts point to the growing popularity of the first cryptocurrency as a safe haven asset
Nov 13, 2024
Market
The product will begin trading on the Swiss Exchange on November 19
Nov 12, 2024
Market
The company’s unrealized profits from investing in the first cryptocurrency approached $13 billion
Nov 12, 2024
Market
The company predicts that the rate of the first cryptocurrency will grow to $200 000 by the end of next year
Nov 11, 2024
Technologies
The company also unveiled its own blockchain adoption index
Nov 11, 2024
Cryptocurrency rates
-
Bitcoin
$91 010
BTC
+2.82%
-
Ethereum
$3 067.93
ETH
-1.72%
-
BNB Smart Chain
$579.4
BSC
+1.23%
-
Dogecoin
$0.375142
DOGE
-3.98%
-
Ripple
$0.893974
XRP
+14.71%
-
Cardano
$0.675704
ADA
+19.46%
-
Bitcoin Cash
$430.14
BCH
+1.95%
-
Polkadot
$5.08
DOT
+3.6%
-
Litecoin
$83.55
LTC
+0.99%
-
Stellar XLM
$0.138964
XLM
+4.96%