blog.ethereum.org mailing list incident

On June 23, 2024, hackers compromised the official Ethereum blog mailing list and sent phishing emails to 35,794 subscribers using the legitimate updates@blog.ethereum.org address. The malicious emails directed users to a fake website that ran crypto drainer malware in the background to steal users' cryptocurrency funds.