Phishing attacks on large cryptocurrency websites pose a significant threat

Last night, it became known about a phishing attack on the websites of Etherscan, Dextools, and Coingecko. They were attacked by hackers. When connecting to the above sites, you may be prompted to sign a scam transaction.

Then, if you confirm any ERC-20 or NFT token, the contract will automatically redeem that token.

Etherscan said it has disabled third-party integrations for the time being. CoinGecko’s tweet identifies the source of the pop-up as Coinzilla, an industry ad network that previously reported that it can deliver more than 1 billion impressions per month across more than 600 reputable sites popular with crypto enthusiasts.

Security Alert: If you are on the CoinGecko website and you are prompted by your Metamask to connect to this site, this is a SCAM. Don’t connect it. We are investigating the root cause of this issue. pic.twitter.com/7vPfTAjtiU

— CoinGecko (@coingecko) May 13, 2022