Cory Klippsten, CEO of Swan Bitcoin, has alerted users via X about a new phishing scam targeting users of the platform. The warning came after multiple reports emerged of a fake email sent to recipients of Swan’s email marketing campaigns, likely originating from the Klaviyo and HubSpot data breaches in 2022.
See also: Xeon Sender: New tool for SMS phishing and spam attacks
Klippsten’s post read: “IT’S FAKE! Don’t send your Bitcoin to anyone. @Swan will never ask you to send your details to anyone.” He stressed that Swan Bitcoin has not suffered a data breach and reiterated that any communication asking users to transfer their Bitcoin is fraudulent. Klippsten also advised caution, noting that many scams are successful because they target people when they are least careful.
He added, "It's a good reminder to be careful out there. Most scams succeed when the target is drunk or high, and it's a vacation in the US..."
The Swan Bitcoin phishing email in question appears to have been created with the intention of tricking users into sending Bitcoin to fraudulent addresses. The scam exploited previous breaches from email marketing services Klaviyo and HubSpot in 2022, which affected multiple businesses, including Swan Bitcoin. Several Twitter users reported receiving phishing emails.
Klippsten responded to this concern by explaining that each phishing email contained a unique Bitcoin address, making it impossible to block an individual destination address and prevent further scams. “It’s a unique address for each email, unfortunately,” he replied, highlighting the sophisticated nature of the scam in adapting to each potential victim.
See also: Phishing scam targets OneDrive users to execute malicious PowerShell script
Steps to protect your data
To further protect themselves from phishing attacks, Swan Bitcoin users are encouraged to follow some best practices:
- Enable two-factor authentication (2FA): This adds an extra layer of security by requiring a second form of verification before accessing accounts .
- Be skeptical of urgent requests: Scammers often create a sense of urgency to pressure victims into making quick decisions without verifying the source.
- Check official channels: Always check official websites or customer service to verify any suspicious messages or emails.
- Use strong, unique passwords: Make sure all accounts are protected with strong, unique passwords that are changed regularly.
See also: Proofpoint: Hackers exploited bug to send phishing emails
Phishing is an online fraud technique that aims to extract sensitive information from victims, such as passwords, banking details and personal data, as in the case of Swan Bitcoin. This method usually involves sending emails or displaying fake websites that appear to be authentic, in order to convince users to reveal information . Warning about the dangers of phishing is crucial, as protecting personal data and maintaining digital security are responsibilities that all internet users must assume.
Source: thecyberexpress
🔑 Secure your passwords with Proton Pass
Password manager from Proton — end-to-end encryption, passkeys, built-in 2FA, and monitoring for leaks of your credentials.
- ✔ Encrypted storage of passwords & passkeys
- ✔ Notification if any of your passwords are leaked (Dark Web Monitoring)
- ✔ Free version — on all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
