MetaMask announced that a cybersecurity threat has hit their platform; users who submitted a customer support ticket from August 1st 2021 to February 10th 2023, have had some of their emails leaked, around 7000 to be exact.
ConsenSys, the parent company of MetaMask, made a statement regarding the cyberattack;
“A third-party service provider that provides customer support ticketing services to ConsenSys was the target of a cyber-security incident…unauthorised actors gained access to the third-party service provider’s systems…users who submitted personal data to our customer support may have had that data accessed by an unauthorised third party.”
ConsenSys stated that the “threat is no longer on-going.”
Phishing Attacks And Security Within Crypto
A common threat when emails are leaked are phishing attacks. These are cyberattacks which bad players will formulate an email pretending to be a well-known organisation in the hopes that a user will give up sensitive information.
In reference to phishing attacks, ConsenSys stated, “we ask that you be extremely vigilant for any suspicious activity and unsolicited contacts which may be made to you by phone, text, email or instant message.” Apart of many companies nowadays are anti-phishing phrases, so make sure that if you’re recieving messages from an exchange or other company, your phrase is there.
MetaMask has been victim to various phishing scams this year through Namecheap, they also warned of another fake airdrop token launch.
This incident highlights the importance of strong security for users and businesses alike. Ensure never to share your private keys, verify that you’re not receiving phishing emails, and stay vigilant when there is any contact with someone relating to your private data.