CoinGecko’s X Accounts Compromised in Elaborate Phishing Attack

Share IT

Key takeaways:

  • The X (formerly Twitter) account and terminal of cryptocurrency data aggregator CoinGecko were momentarily hacked on January 10.
  • The company’s X account briefly featured a phishing scam link alerting users to a CoinGecko token airdrop.

The X (formerly Twitter) account and terminal of cryptocurrency data aggregator CoinGecko were momentarily hacked on January 10.

They will act right away to look into the matter and safeguard the accounts, as reported by CoinGecko. According to the business, users are advised not to interact with dubious content or click on any links.

On January 10, the company’s X account briefly featured a phishing scam link alerting users to a CoinGecko token airdrop. Since then, the post has been removed. 

Scammers exploited the X account of the US Securities and Exchange Commission (SEC) on January 9, posing as Chair Gary Gensler and claiming that the SEC had authorized several applications for Bitcoin spot exchange-traded funds (ETFs). Since then, the post has been removed.

However, a statement released on Wednesday states that the US SEC has approved spot Bitcoin ETFs offered by VanEck, Bitwise, Fidelity, Franklin, Valkyrie, Hashdex, Ark Invest, Grayscale, BlackRock, WisdomTree, and Invesco Galaxy. 

The digital asset market has been anxiously awaiting the outcome of the Spot Bitcoin ETF case for the past few months. More than a dozen companies filed applications with the SEC, hoping to provide the investment product. The SEC has approved each and every Spot Bitcoin ETF.

In an investigation report on the SEC hack, X stated that the absence of two-factor authentication (2FA) connected to the SEC’s account was the real cause of the breach, not any attacks on the infrastructure. X’s Safety team reported that the incident occurred as a result of an unidentified person using a third party to gain access over a phone number connected to the SEC account.

SIM-card swap attacks are a persistent problem in the Web3 community. They happen when imposters, pretending to be the actual account owners, get in touch with telecom providers and ask them to change the victim’s phone number to one they own. This gives the imposters access to the victim’s social media accounts that are linked to the phone number. A phishing attempt also compromised Ethereum co-founder Vitalik Buterin’s X account in September 2023.

Share IT
Deep
Deep

Get Daily Updates

Crypto News, NFTs and Market Updates

Claim Your Free Trading Guide

Sign up for newsletter below and get your free crypto trading guide.

Can’t find what you’re looking for? Type below and hit enter!