[SCAM OF THE WEEK] Phishing Campaign Targets Crypto Users

Stu Sjouwerman | Nov 16, 2022

Image Grateful Acknowledgment McAfeeMajor cryptocurrency company FTX recently filed for bankruptcy, and there's a big phishing campaign on the loose targeting FTX users.

McAfee discovered a malicious site that asked users to submit their crypto wallet in exchange for a refund. Of course, since the site was owned by malicious bad actors, they would get access to the victim's crypto wallet and transfer all funds to their pockets. 

McAfee also noted that this code is almost the exact same as sites targeting WalletConnect crypto customers earlier this year, just with a modified phishing kit to target these site users.

If you or any of your users currently use FTX I highly encourage  you to double check the legitimacy of any requests before submitting any info related to your crypto holdings.

I would send your employees, friends and family something like the following. Feel free to copy/paste/edit.

"On November 15th, cryptocurrency company FTX has filed for bankruptcy. This has resulted in bad actors leveraging this news story and as a result, phishing emails to potential victims who utilize the platform. There will be a number of scams related to this, so please remember to Think Before You Click! "

Remember, defending your human security layer with new-school security awareness training is the only way to ensure your users are able to spot a suspicious phishing email that leverages a current event. 

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.