Ethereum core developer Tim Beiko reported that the Ethereum Foundation’s mailing list was leaked due to a vulnerability in SendPulse, the email automation service used by the foundation.
An attacker exploited this to send phishing emails from updates@ethereum.org to subscribers.
The foundation has since restricted access to the mailing list, according to the latest update by Bieko, who further urged users not to click any links sent from that email.
“PSA: it seems like the mailing list provider the EF uses for “updates@ethereum.org” has been compromised. We are currently trying to reach @SendPulseCom to resolve the issue. Please don’t click any links sent from that email. “
Users, too, confirmed receiving fraudulent emails.
Phishing attacks have become increasingly common. Last year, the X account of Ethereum co-founder Vitalik Buterin was hacked by scammers who posted a fake NFT giveaway prompting users to click a malicious link, resulting in victims losing around $800,00
We współpracy z: https://cryptopotato.com/ethereum-foundations-mailing-list-leaked-vulnerability-in-sendpulse-flagged/
