Metamask Account Verification Cryptocurrency Credential Phishing Attack

Initial Email Content

Subject

Wallet update

Body

Metamask requires all users to verify their wallets in order to comply with the new guidelines. You must verify your wallet before 3/5/2022 to continue using our service.

‍

What if I don’t complete the wallet verification?
If you don’t verify your wallet, your wallet will be restricted.

‍

Verify my wallet

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

rknwerwer arwerwer

URL

This is the artifact description.

Attack Description

This link-based attack impersonates Metamask using a maliciously-registered domain, an account verification theme, and a cryptocurrency theme to steal credentials.

Analysis Overview

Type

Credential Phishing

Tactic

Maliciously Registered Domain

Goal

Credential Theft

Impersonated Party

Vector

Link-based

Theme

Account Verification

Cryptocurrency

Language