A phishing link was posted to the X account of blockchain-focused cybersecurity company Certik after a bad actor hacked the protocol’s social media profile.
In a new announcement, the cybersecurity company say that a “verified account associated with well-known media” was able to hack into one of their employees’ X accounts and use it to post links to phishing scams.
Certik says the phishing link was removed just 14 minutes after it was posted and that no significant losses resulted from the exploit.
“A verified account, linked to a well-known media [outlet]contacted one of our employees.
Unfortunately, it appears this account has been hacked, leading to a phishing attack on our employee. We quickly discovered the breach and removed the related tweets within minutes…
According to our investigation, there was no significant damage as a result of this incident.”
However, according to blockchain detective ZachXBT, the original direct message the Certik employee clicked on was to show signs that it was dangerous.
“Why haven’t you (Certik) found the ‘known media’ account that contacted you suspiciously, since they haven’t posted since April 2020 (clearly compromised)? Will Certik reimburse victims?
Certificate replied saying that those affected by the exploit should contact them.
“While it’s easy to point fingers after a phishing attack, the reality is that these scams are designed to exploit human trust and vulnerabilities. That’s why we strive to build strong security systems and enable users to recognize and avoid these threats.
Fighting phishing requires a united front. We encourage those affected by the recent Twitter incident to contact us.”
Don’t miss a beat – Subscribe to receive email alerts straight to your inbox
Check price action
follow us on TweetFacebook and Telegram
Surf to the Daily Hodl mix
Generated image: Midjourney