The Ethereum Foundation’s email account was hacked on June 23 to promote a fake Lido staking scheme. Attackers used the compromised [email protected] email to send scam emails to 35,794 recipients, offering a 6.8% yield on staked Ether.
The scam email falsely claimed a partnership between the Ethereum Foundation and LidoDAO, promising secure and verified staking services. Recipients were directed to a fraudulent website designed to drain their crypto funds upon wallet transaction approval. Fortunately, no funds were lost, and the foundation quickly regained control of the email account.
The hack compromised 81 unique email addresses from the foundation’s subscriber list. The foundation has since collaborated with wallet providers and DNS services to warn users about the malicious site.
This event underscores the persistent threat of phishing attacks in the cryptocurrency sector and the importance of vigilant security measures.