- Hackers are targeted at Business CRM accounts to steal mailing lists
- E -emails used to send spam and fool people to create compromised crypto -drawbooks
- The goal is to steal the money so be on your guard
Hackers steal mailing lists from larger companies and use them to break into people’s cryptocurrency and snap their funds.
A new report from cybersecurity scientists Silent Push, who called the campaign ‘Poisonseed’, outlined how criminals first created forged landing pages for companies such as Coinbase, Ledger, Mailchimp, Sendgrid, Hubspot and others. They harvest people’s login credentials that allow cyber criminals to log in to mailing service accounts and exfilter any mailing lists.
Then they sent e emails, mimicking these companies and encouraging users to create a new coinbase design book using the seedfrase embedded IE email. A seed phrase is a series of 12 to 24 words generated by the wallet that gives access to the funds inside. It acts as a Master key, so anyone who has it can restore the wallet and control cryptocurrencies inside.
Seed expression poisoning attack
“Bulk -spam recipients are targeted at a cryptocurrency seed seed poison attack,” Silent Push explained.
“As part of the attack, Poisonseed provides security seeds to get potential victims to copy and insert them into new cryptocurrency for future compromise.”
Once users have created new wallets and top them up with their funds, the criminals can simply send the money elsewhere, which is a permanent loss for the victims.
The researchers believe that the campaign is the work of two “loosely adjusted” threat actors, called scattered spider, and Cryptochameleon, both of which are reportedly part of a wider cyber crime ecosystem called com.
Since cryptocurrency is allowed and decentralized when the funds are sent from one wallet to another, the only way to pick them up is to get the other side to send the money back.
By 2024, the US government seized tens of thousands of millions of dollars worth of crypto as part of a wider study of market manipulation, theft, fraud and more.
Via Hacker the news
