MetaMask security at risk!

MetaMask security is at risk! According to a blockchain security firm Halborn, a new phishing attempt is targeting Metamask cryptocurrency wallet holders.

Cybercriminals and hackers are profiting on the cryptocurrency airgaps, and as various crypto businesses grow in popularity, so does the number of frauds and other hacking events targeting cryptocurrency organisations and investors. Technical education specialist Luis Lubeck of blockchain security firm Halborn released details on how skilled fraudsters attack Metamask holdings via a new phishing effort.

Look out for suspicious emails

The fraud involves scamming users with emails and convincing them to readily surrender their passwords. According to Halborn, the email appears real at first sight, with Metamask's header and logo proving its validity.

It also includes a message advising users about Know Your Customer (KYC) rules and ways to validate their wallets. However, after reviewing one such email, the blockchain security firm discovered many red flags.

The email had various typographical problems, as well as a bogus sender's email address with the site ‘metamaks.auction’. Halborn further stated that the server used to deliver the email had nothing to do with the legitimate Metamask organisation.

At the bottom of the email ,a ‘Verify Your Wallet’ request was placed which when clicked, directed users to dockwo.com - a domain unrelated to Metamask.

This fraudulent website prompted users to enter their password. According to Halborn, once the victim enters the required passcode, they are actually redirected to the real MetaMask website, which misleads the victim into believing that everything is in order, but the fact of the matter is that the details of their crypto wallet has already been exposed, and the scammers now have all the information they need to access the victim's digital assets.

Keeping in mind the MetaMask security, and fraudsters becoming more sophisticated, the security firm suggests users' to be extra safe, utilise 2FA in every account and update multi-layer security solutions.