TokenPost topic
Phishing
60 TokenPost stories are tagged Phishing. The newest appear first.
Latest Phishing stories
- Tracked EVM Wallet-Drainer Phishing Cost Users $83.85 Million in 2025
The tally counted 106,106 victims, 68% fewer than in 2024. It also included 11 cases with losses of at least $1 million.
· Technology
- Fake SafePal Firmware Letters Target Users in Italy With QR Codes
SafePal disclosed unauthorized access to order information for about 39,798 customers whose orders were placed from March 2, 2025, through April 11, 2026.
· Technology
- Bitget Wallet Flags 37,000 Weekly Signing Requests for Potential Phishing
The Q3 2026 average was 7.4 times the Q2 figure, but the tally does not measure unique attacks or confirmed financial losses.
· Technology
- SEAL Triages 60 Security Incidents, Four Protocol Compromises Involve $3.87 Million
The weekly tally also included losses from social engineering, infrastructure exploits and phishing, along with thousands of collected threat indicators.
· Technology
- Across Says Systems Restored After Registrar Attack Redirected Website
The platform traced the disruption to social engineering at its domain registrar and pledged full reimbursement for users affected by the phishing redirect.
· Technology
- Across Restores Systems After Domain Hijacking, Plans User Reimbursements
The cross-chain platform says social engineering targeting its domain registrar turned its official website into a phishing page.
· Technology
- Ethereum Phishing Signature Leads to $303,000 aEthWETH Loss
The loss was reported Nov. 11.
· Technology
- Across Suspends Website and API After Domain Hijacking, Promises Full Compensation
The cross-chain protocol said visitors to a phishing page may have been affected, while users who accessed it before the hijacking and those using API integrations were not.
· Technology
- Across Takes Its Front End and API Offline After Domain Takeover
The team received an alert within 15 minutes, but Across said it cannot confirm the domain is secure while Namecheap has yet to respond.
· Technology
- AcrossProtocol Domain Remains Offline After Registrar Security Breach
AcrossProtocol linked the compromise to a social-engineering attack targeting its registrar, Namecheap. Cloudflare and SEAL911 helped block a phishing site.
· Technology
- Across Says Domain Takeover May Have Exposed Users to Phishing
The protocol has taken its front end and API offline and plans to compensate affected users.
· Technology
- Across Plans to Compensate Users After Its Domain Was Hijacked
Across traced the takeover to a social-engineering attack on Namecheap. Its frontend and API will remain offline until domain security is restored.
· Technology
- Gnosis Pay Breach Exposes Full Card Details and Wallet Addresses
Exposed information included CVVs and home addresses. Gnosis Pay said it found no suspicious transactions or fund transfers.
· Technology
- Gnosis Pay Breach Exposes Customer Data, Prompts Phishing Warning
The company says customer funds and its separate enterprise platform were unaffected. It has not confirmed any phishing attempts.
· Technology
- Foundation Says Phishing Attempt Targeted 21,463 Email Addresses
Foundation said attackers accessed customer records, email systems and domain settings. Scammers later called customers seeking Bitcoin (BTC) wallet seed phrases.
· Technology
- 赵长鹏 Urges Users to Distinguish .cam From .com in Trust Wallet Warning
He reposted a security researcher’s warning on Thursday, Nov. 5.
· Technology
- Foundation Confirms Attackers Accessed Shopify Store in Passport Incident
CEO Zach Herbert did not specify what information attackers reached. Information connected to Shopify orders had earlier been considered potentially exposed.
· Technology
- Echelon Restores Website After Unauthorized Registrar DNS Change
The team traced the redirection to a nameserver change at Name.com; Echelon said its smart contracts were unaffected.
· Technology
- Foundation Warns of Phishing Emails From Hijacked Domains at Other Firms
The company said the emails did not come from its official domains.
· Technology
- Jameson Lopp Says Phishing Emails Abuse Google Infrastructure
The Casa co-founder said a goo.gl link in one message leads to a phishing login page. He shared a screenshot of the email in an Oct. 29 post on X.
· Technology
- Foundation Details Partial Breakdown of 23,000-Plus Phishing Attempts
The listed counts cover 19,057 attempts through Mailgun and 1,503 through Google Workspace. The number of potentially affected customers remains under investigation.
· Technology
- CoinDCX Warns Users of Phishing as Exchanges Investigate Similar Activity
The exchange said scammers are using fake notices and emails, while other platforms investigate similar activity.
· Technology
- Foundation Finds More Than 23,000 Phishing Email Attempts
The count does not represent affected customers. An investigation also found customer records in legacy store systems accessible to an attacker.
· Technology
- Foundation Says Phishing Emails Included Some Customer Details
Attackers were likely able to reach the company’s support inbox. Foundation said it stopped their ability to send email within 10 minutes of the first reports.
· Technology
- Foundation Says Cloudflare Key Leak Enabled Malicious Emails From Its Domain
The company says it revoked the exposed keys and that Passport hardware wallets and assets stored on them remain safe.
· Technology
- Former Foundation Job Applicant Reports Receiving a Phishing Email
People who had contacted Foundation through any of its email addresses were advised to stay alert.
· Technology
- Keystone Says Store Breach Exposed Customer Data From Older Orders
The company said payment details and wallet security credentials were not exposed; buyers described orders dating back two years.
· Technology
- SlowMist Finds More Than 1,500 DarkSword Phishing Sites
The sites include fake Binance, OKX and wallet services, as well as e-commerce, gaming and cryptocurrency exchanges.
· Technology
- Fake Google Ads Target Ledger Users in Recovery Phrase Phishing Campaign
The counterfeit interfaces solicited wallet recovery phrases in a campaign analyzed in August.
· Technology
- 赵长鹏 Says AI Can Harm Crypto Without Breaking Bitcoin's Cryptography
He said leaked data can intensify phishing and social engineering attacks, while internet and banking systems rely on weaker cryptography.
· Technology
- Fake Accounts and Hijacked Profiles Target XRP Holders With Scams
Xaman founder Wietse Wind said scammers create more than 20 fake X accounts and 10 malicious domains daily to promote a fake desktop app and fraudulent XRP airdrops.
· Technology
- NGRAVE Traces Stolen Bitcoin to 12 Addresses After Wallet Phishing
Stolen XRP moved through 54 transfers as NGRAVE continued to assess losses from the Oct. 17 attack.
· Technology
- NGRAVE Finds Attackers Copied LIQUID Notification List in Phishing Attack
The copied data included device and usage details. Other customer records were accessible, but NGRAVE is still checking whether they were taken.
· Technology
- NGRAVE Traces $2.56 Million in Losses From Fake LIQUID Alerts
The company's minimum tally covers roughly 70 wallet addresses on four networks, a narrower scope than an earlier on-chain count.
· Technology
- NGRAVE Phishing Attack Drains $2.56 Million From About 70 Wallets
Bitcoin accounted for about $1.77 million of losses across four blockchains. NGRAVE said its ZERO hardware wallet and private keys were not directly compromised.
· Technology
- NGRAVE Phishing Attack Linked to Estimated $2.65 Million in Wallet Losses
About $2.16 million of the traced funds went into XMR1 purchases on Hyperliquid. The estimate does not establish that every affected wallet belonged to an NGRAVE user.
· Technology
- SecuX Users Report Access Problems as Ripple CTO Flags Phishing Alert
David “JoelKatz” Schwartz said an Android app alert linked to a page requesting a 12- or 24-word recovery phrase.
· Technology
- SecuX App Remains Inaccessible After Android Phishing Alert
The company announced emergency maintenance on Oct. 16 and later marked service restored, but users continued to report access problems the next day.
· Technology
- Schwartz Says SecuX App Pushed Phishing Alert as Wallet Access Problems Persist
Schwartz said the Android alert linked to a page requesting a 12- or 24-word recovery phrase. Users continued to report access problems after SecuX said service had been restored.
· Technology
- Taylor Monahan Says New Ledger Loss Reports She Reviewed Involved Scams
Monahan listed fake apps, phishing sites, misleading ads, alarming emails and scam calls targeting owners worried about the cellular implant in CryptoBilis devices.
· Technology