According to a report from PeckShield, the X account for the Symbiotic staking protocol was compromised on October 5. The team's official website reported that the account was still compromised on October 7.
See also: Linux malware “perfctl” used for cryptomining
As a result of the breach, Symbiotic’s X account promotes a “points” checklist and asks users to click on a link to check how many points they have. However, the link leads to the wrong URL, network-symbiotic[.]fi, instead of the correct one, symbiotic.fi.
When users log in to the fake phishing with a wallet, they are presented with a page claiming they have earned thousands of points, even though they have never interacted with the Symbiotic protocol. The page urges users to redeem their points immediately and claims they will be lost unless they click a large, green “redeem” button in the middle of the screen.
Pressing the “Redeem” button with an empty wallet leads to an error message stating that the user should try a different wallet, with a typical error message found on “phishing” websites requesting message signatures.
If a user's wallet contains Symbiotic tokens, the site likely asks the user to sign a message, which is then used to drain the user's tokens.
See also: North Korean hackers Kimsuky use new malware KLogEXE and FPSpy
From its official website, the Symbiotic team is currently warning users that its X has been hacked and that users should not interact with websites associated with the account.
See also: SnipBot: New version of RomCom malware steals data
X-account breaches, such as the Symbiotic case, have become a routine problem in the crypto space. Users should consider bookmarking the URL for frequently used applications, as this is generally a more reliable way to reach the correct site than relying on X-links, although it is not 100% foolproof. Users should be especially cautious when asked to sign a message written in code, as this is often, but not always, a sign of a phishing attack.
Source: cointelegraph
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
