blog.ethereum.org mailing list incident

On June 23, 2024, hackers compromised the official Ethereum blog mailing list and sent phishing emails to 35,794 subscribers using the legitimate updates@blog.ethereum.org address. The malicious emails directed users to a fake website that ran crypto drainer malware in the background to steal users' cryptocurrency funds.

• →Official Ethereum blog mailing list was compromised and used to send phishing emails to over 35,000 subscribers.
• →Attackers used the legitimate updates@blog.ethereum.org email address to increase credibility of the phishing attempt.
• →Users who clicked the malicious link were directed to a website running crypto drainer malware.
• →This incident highlights the security risks even with official communication channels in the crypto ecosystem.
• →The attack demonstrates how threat actors exploit trusted sources to conduct large-scale phishing campaigns.