Hackers exploit MicroStrategy social media to orchestrate $440,000 phishing heist

by Jeremy

MicroStrategy’s official X (previously Twitter) account was hacked and used to advertise a faux airdrop of an Ethereum-based MSTR token in the course of the early hours of immediately, Feb. 26.

Blockchain safety agency PeckShield rapidly warned that the offending submit contained a phishing hyperlink that redirected to a copycat web site of the Bitcoin-holding firm.

The malicious submit has since been eliminated, however MicroStrategy has but to touch upon the incident as of press time.

MicroStrategy is the largest company holder of BTC, and its holdings not too long ago topped the $10 billion mark. Saylortracker knowledge reveals that the corporate’s 190,000 BTC is at present value $9.7 billion and has an unrealized revenue of $3.7 billion.

$440,000 stolen

On-chain sleuth ZachXBT revealed that the attacker stole about $440,000 from customers who unknowingly clicked on the submit.

Rip-off Sniffer, a Web3 anti-scam platform, reported that the majority funds might need been stolen from one sufferer. In line with the agency, the sufferer seemingly “signed a Uniswap Permit2 allow batch signature, which gave a number of token approvals” to the attacker. Some stolen property included comparatively unknown tokens like wBAI, wPOKT, and CHEX.

Etherscan knowledge present that the attacker has already begun transferring the stolen funds, leaving 62.97 Ethereum, equal to $195,000, within the exploiter’s tackle as of press time.

Phishing assaults prevalent in crypto

Phishing scams are among the many hottest methods malicious actors steal funds from unsuspecting crypto customers.

Crypto scammers typically entice their targets by compromising the social media accounts of well-known initiatives. They promise faux airdrops through phishing hyperlinks, tricking unsuspecting people into granting them entry to their funds. In consequence, victims unknowingly permit attackers to empty their funds by clicking on these hyperlinks.

Rip-off Sniffer revealed that assaults of this nature resulted within the lack of practically $300 million from greater than 320,000 crypto customers all through 2023.



Supply hyperlink

You have not selected any currency to display