Malware Campaign Targets Crypto Wallets

PoisonSeed Malware Targets Crypto Users via Email Providers

• The PoisonSeed malware campaign targets users of bulk email providers like Mailchimp and SendGrid.
• Victims are tricked into providing login details through fake websites, leading to mailing list theft.
• Compromised lists are used to send phishing emails mimicking Coinbase, promoting fake wallet seed phrases.
• The campaign is distinct from similar threats by Scattered Spider and CryptoChameleon.
• Troy Hunt, a Microsoft regional director, was among those targeted during the attack.

The PoisonSeed campaign exploits bulk email service users, using stolen mailing lists to distribute phishing emails that impersonate Coinbase. This highlights the need for vigilance against social engineering scams.