Popular Crypto Data Sites Targeted With Phishing Attack
Etherscan, CoinGecko and other sites displayed a suspicious pop-up asking users to connect their wallets.
May 13, 2022 at 10:07 p.m. UTC:format(webp)/cloudfront-us-east-1.images.arcpublishing.com/coindesk/H4XDZGGPTFHGFL3GZ3NJVGFLLI.jpeg)
(wk1003mike/Shutterstock)
/arc-photo-coindesk/arc2-prod/public/LXF2COBSKBCNHNRE3WTK2BZ7GE.png)
Crypto data websites Etherscan, CoinGecko and others reported incidents of a malicious pop-up prompting users to connect their MetaMask wallets.
The phishing attack appears to come from a domain displaying the Bored Ape Yacht Club logo. As of press time, the site tied to the domain appeared to be taken down. According to a WHOIS lookup, the domain was registered Friday around 3 p.m. ET.
"We are investigating the root cause of this attack to fix it as soon as possible," CoinGecko founder Bobby Ong told CoinDesk in a Telegram message.
“The situation is most likely caused by a malicious ad script by Coinzilla, a crypto ad network – we have disabled it now,” said Ong. “We are monitoring the situation further.”
In a tweet, Etherscan urged users to “not confirm any transactions” that popped up on its website.
CORRECTION (May 14, 14:49 UTC): DeFi Pulse was not one of the websites affected in the attack, as reported in an earlier version of this story.
:format(webp)/s3.amazonaws.com/arc-authors/coindesk/8bd01a52-3fcd-46f6-b1ee-3bedeee98f65.png)
Tracy was the deputy managing editor at CoinDesk. She owns BTC, ETH, MINA, ENS and some NFTs.