BlockFi and FTX Targeted by Debtors, Phishing Email Scam Siphons Away Over a Million Dollars in Assets

BlockFi and FTX Targeted by Debtors, Phishing Email Scam Siphons Away Over a Million Dollars in Assets

BlockFi and FTX Targeted by Debtors, Phishing Email Scam Siphons Away Over a Million Dollars in Assets

According to The Block, an email phishing scam targeting creditors of bankrupt cryptocurrency companies such as BlockFi and FTX has allegedly stolen at least $5 million worth of cryptocurrencies and NFTs in the past week, and it is still ongoing.

Web3 security expert Plumferno, on the X platform, discovered a sophisticated phishing scam being executed by a client using the malicious software tool “Pink Drainer” with the help of several friends. The source of the scam was fake emails posing as BlockFi, offering settlements and claims for creditors. Plumferno also received reports that FTX users were receiving similar phishing emails.

Plumferno suggests that the hackers likely obtained the email address list from stolen data of the email service Mailer Lite. Mailer Lite was hacked in January this year, leading to another large-scale phishing scam that swindled a significant amount of money. Plumferno wrote on X:

Phishing email impersonating BlockFi official (Image source: @Plumferno)

Data reviewed by The Block shows that since March 17, nearly $4.5 million worth of Ether (ETH) has flowed into the wallet, with new transactions continuing to appear. Additionally, the wallet seems to have also sold several high-value NFTs, including Mutant Apes and Otherdeeds.

Plumferno reminds users to remain highly vigilant against any emails claiming to be from BlockFi, requesting users to click on buttons or claim assets. It is advised to use wallet protection extensions, check the sender and subject of emails, and verify any website links before accessing them.