DeFi Platform Compound Finance's X Account Hacked; Phishing Site Promoted, Users Warned
Summary:
Compound Finance's X account, a DeFi platform, has been hacked, leading users to a fake phishing site. A post advertising "free $COMP tokens" and directing to a suspicious link was spotted. Cybersecurity blog Officer's Notes and blockchain security platform Scam Sniffer both warned users not to click on any links from the compromised account. The bogus site was identified as a 'Pink Drainer' scam site, stealing cryptocurrencies via Pink Drainer software. Stolen funds have been traced and found to be laundered through eXch exchange.
Compound Finance's DeFi platform's X (once called Twitter) handle has fallen victim to a security breach, with hacking activity now directing to a bogus phishing site, reveal the security-centric X accounts of Scam Sniffer and Officer's Notes. At a time stamp of 4:57 p.m. UTC, a post surfaced on the account advertising "free $COMP tokens," persuading followers to select a provided hyperlink. This link reroutes users to compound-labs.xyz, a site that is visually identical to the protocol's authentic website, compound.finance, but which has been flagged as a scam outlet.
Officer's Notes, a cybersecurity blog, sent out a warning from its own page at 5:14 UTC, cautioning users about interacting with any links embedded in the message. With the declaration, "The @compoundfinance X is hacked and sharing a sham link," followers were urged to look to @RevokeCash / @web3_antivirus / @wallet_guard / @blockfence_io / @realScamSniffer for updates.
The blockchain-based security tool, Scam Sniffer, issued a similar alert to its users, sharing that "A suspicious link (compound-labs[.]xyz) surfaced 16 hours ago," originating from the authentic X handle. The post encouraged users to remain alert and prioritize the security of their assets by refraining from interaction with doubtful links.
As per the information shared by Scam Sniffer, the phony phishing site being shared by the unauthorized access has been classified as a "Pink Drainer scam website," suggesting its use of the Pink Drainer software to hijack cryptocurrencies from users. Further details in the post highlighted that blockchain researcher ZachXBT has followed the trail of funds appropriated by the scam site. The pilfered assets have been funneled through the eXch exchange. More details will be provided as the situation unfolds.
Published At
12/29/2023 10:03:19 PM
Disclaimer: Algoine does not endorse any content or product on this page. Readers should conduct their own research before taking any actions related to the asset, company, or any information in this article and assume full responsibility for their decisions. This article should not be considered as investment advice. Our news is prepared with AI support.
Do you suspect this content may be misleading, incomplete, or inappropriate in any way, requiring modification or removal?
We appreciate your report.