Mar 2024 - Decrypt Media Email Newsletter Compromise - $3k (Global)
"A next-generation media company. Powered by AI & Web3." "Decrypt is a media platform that focused on stories from culture, technology, business, education, politics, art, and the latest news."
"Exciting news! The Decrypt Foundation is taking a significant step towards decentralization with the introduction of Decrypt Provisions. As a key player in our ecosystem, you're invited to claim your share of DCPT tokens as a token of our appreciation."
"Eligibility: All users are eligible to the limited launch airdrop, with 25% of the market cap being distributed."
"Don't miss this exclusive opportunity to be part of Decrypt's journey towards a decentralized future. Claim your DCPT Provisions today!"
"URGENT: Our email newsletter account has been compromised and a phishing scam email has been sent to all of our subscribers. Please delete, and don't open or click any links. There is no $DECRYPT airdrop. We are working to regain access."
"The email newsletter account of Web3 media company Decrypt has been compromised, and a phishing scam email has been sent to all of our subscribers. Please do not click on any links. Currently, the attacker has profited $3,000 through phishing."
"Looks like only ~$3K phished so far Drainer customer address 0x6734a9F000AF1901F50010429E83B91285c26C9B"
Further Analysis
Decrypt is a next-generation media company that focuses on stories spanning culture, technology, business, education, politics, art, and the latest news. Recently, they appeared to announce Decrypt Provisions, a step towards decentralization, inviting users to claim their share of DCPT tokens. However, an urgent alert followed, revealing that Decrypt's email newsletter account was compromised, leading to a phishing scam targeting subscribers. The attacker has already profited $3,000 through phishing, prompting Decrypt to advise subscribers against clicking any links and assuring that there is no $DECRYPT airdrop.
How Could This Have Been Prevented?
More Cryptocurrency Exchange Hacks/Scams/Frauds
Prisma Finance TroveManager Exploit > > < < Munchables Rogue Developer Theft
Sources/Further Reading
SlowMist Hacked - SlowMist Zone (Dec 31)
@decryptmedia Twitter (Dec 31)
@zachxbt Twitter (Dec 31)
@ShibaNotAdream Twitter (Dec 31)
https://www.crunchbase.com/organization/decrypt (Dec 31)
Ethereum Transaction Hash (Txhash) Details | Etherscan
(Dec 31)
Fake_Phishing326880 | Address 0x6734a9F000AF1901F50010429E83B91285c26C9B | Etherscan
(Dec 31)
 t.me/QuadrigaInitiative
|
 /r/QuadrigaInitiative
|
 @QuadrigaInit
|
 info@quadrigainitiative.com
|