Email marketing service provider Mailer Lite was the victim of a phishing attack that cost more than $600,000 in damages, according to Blockaid.
In a comment for Decrypcomments for Decrypcomments for Decryp, representatives of Mailer Lite said that the attackers had compromised the platform, initially attacking one of the employees. After he clicked on the fraudulent link, the hackers gained access to internal services.
This level of control allowed them to impersonate account owners. In total, they gained access to 117 accounts. The attackers used a “small” number of them for a phishing campaign. Its focus was on users associated with the Web3 industry, Mailer Lite clarified.
On-chain researcher ZachXBT confirmed that the platform's clients affected by the incident included Cointelegraph, Wallet Connect, Token Terminal and several DeFi projects.
Community Alert: Phishing emails are currently being sent out that appear to be from CoinTelegraph, Wallet Connect, Token Terminal and DeFi team emails.
He estimates the damage from the attack was approximately $580,000.
Users in the comments reported that they had also received phishing emails from Trust Wallet and OpenSea.
Blockaid experts noted that hackers used the Angel Drainer Group infrastructure, which gained fame after an attack on Ledger Connect Kit, to empty wallets. According to experts, the number of malicious decentralized applications launched on the portal increased sharply on January 16 and remains at a high level.
According to Blockaid, the hackers loot could have been higher, but the company's solutions protected user assets worth $2.7 million.
In a comment for Decrypcomments for Decrypcomments for Decryp, representatives of Mailer Lite said that the attackers had compromised the platform, initially attacking one of the employees. After he clicked on the fraudulent link, the hackers gained access to internal services.
This level of control allowed them to impersonate account owners. In total, they gained access to 117 accounts. The attackers used a “small” number of them for a phishing campaign. Its focus was on users associated with the Web3 industry, Mailer Lite clarified.
On-chain researcher ZachXBT confirmed that the platform's clients affected by the incident included Cointelegraph, Wallet Connect, Token Terminal and several DeFi projects.
Community Alert: Phishing emails are currently being sent out that appear to be from CoinTelegraph, Wallet Connect, Token Terminal and DeFi team emails.
He estimates the damage from the attack was approximately $580,000.
Users in the comments reported that they had also received phishing emails from Trust Wallet and OpenSea.
Blockaid experts noted that hackers used the Angel Drainer Group infrastructure, which gained fame after an attack on Ledger Connect Kit, to empty wallets. According to experts, the number of malicious decentralized applications launched on the portal increased sharply on January 16 and remains at a high level.
According to Blockaid, the hackers loot could have been higher, but the company's solutions protected user assets worth $2.7 million.
