Cointelegraph Hacked: Fake Airdrops Promoted in Front-End Exploit

Key Takeaways:

  • Cointelegraph’s website was hacked, with attackers promoting fake ICO airdrops and CTG tokens.
  • MetaMask warns users that visiting the site may expose wallets to theft via malicious pop-ups.
  • The breach follows a major data leak, raising concerns of broader cyber threats across the crypto space.

Cointelegraph, one of the largest crypto news sites, suffered a major security breach today, with attackers taking over its front-end to promote fraudulent ICO airdrops. Users reported seeing pop-ups for fake “CoinTelegraph ICO Airdrops” and “CTG tokens” on the homepage, which aimed to trick visitors into connecting wallets or revealing personal data.

Confirming the attack, Cointelegraph’s official X account warned the community to avoid interacting with any pop-ups and to refrain from connecting wallets or submitting recovery phrases. The site’s team is currently working to resolve the issue.

MetaMask Issues Warnings to Users

At the time of writing, users with the MetaMask wallet installed were receiving critical warnings when visiting Cointelegraph’s domain. The alerts cautioned that accessing the site could expose sensitive data such as secret recovery phrases, passwords, or trigger the signing of malicious transactions that might drain crypto assets.

This incident mirrors an earlier phishing attack on CoinMarketCap, where users were tricked into connecting wallets to malicious links via a compromised homepage. Security analysts believe today’s hack on Cointelegraph may involve the same hacker group, given the similar attack patterns.

Massive Data Leak Raises Further Concerns

The hack comes just days after Cybernews reported a massive data leak on June 21, in which over 16 billion login credentials were exposed online. Cybersecurity experts warn that such leaks, potentially fueled by infostealer malware, are amplifying risks for crypto users by making it easier for attackers to launch phishing campaigns.

Also Read: Crocodilus Malware : How Hackers Are Stealing Crypto Through Android Apps

As the situation unfolds, users are advised to remain vigilant, avoid clicking on links from the hacked Cointelegraph site, and update their security measures.

Disclaimer: The information in this article is for general purposes only and does not constitute financial advice. The author’s views are personal and may not reflect the views of Chain Affairs. Before making any investment decisions, you should always conduct your own research. Chain Affairs is not responsible for any financial losses