On October 29, 2023, Cointelegraph reported a hack that resulted in a fraudulent pop-up on their site. Users were misled and prompted to connect their crypto wallets for a fake token airdrop.
Incident Description
Cointelegraph confirmed the breach of its website, reporting a fraudulent pop-up affecting visitors. In a statement on platform X, the publication advised users not to interact with any prompts asking for wallet access or personal information.
Hackers' Tactics
The fake pop-up claimed that users had been randomly selected for a new token giveaway, supposedly backed by Cointelegraph. According to various social media reports, a malicious JavaScript code was likely added to Cointelegraph's advertising system to display a fabricated token price, promising each participant nearly $5,500 worth of tokens if they connected their wallet to the site.
Expert Precautions
Former Binance CEO Changpeng Zhao warned crypto investors to be extra cautious when asked to connect their wallets to any websites. He noted that in recent days, multiple attacks targeted information sites. In both incidents, similar social engineering tactics were used, leading to user fund losses right after granting wallet access.
The incidents involving Cointelegraph and CoinMarketCap highlight the importance of vigilance and caution in the cryptocurrency space. Experts advise users to carefully verify sources and never provide wallet access without critical information.