A recent security breach on the Cointelegraph website involved a front-end exploit that displayed a deceptive pop-up, falsely advertising 'Cointelegraph ICO Airdrops' and 'CTG tokens'. This malicious banner instructed users to link their cryptocurrency wallets in order to receive approximately $5,500 worth of tokens, referencing a supposed 'fair launch' event and a fake CertiK audit in an attempt to appear legitimate.
Cointelegraph has advised its users to avoid interacting with these pop-ups, connecting their wallets, or providing any personal information, as the company works to resolve the issue. This type of attack typically deceives victims into connecting their wallets under false pretenses, such as claiming token rewards or requiring identity verification, only to immediately drain their funds.
The method used in this attack bears a striking resemblance to a similar exploit that occurred on CoinMarketCap just two days prior, where attackers embedded malicious code to display wallet phishing prompts. In both instances, the attackers relied on exploiting trusted platforms to bypass user caution, effectively transforming news and data websites into unsuspecting channels for wallet drainage.