Halborn Points to a MetaMask Phishing Campaign

According to the respected blockchain security company, Halborn, there is currently an ongoing phishing campaign aimed at users of the MetaMask crypto wallet. The goal of the campaign is to scam the users out of their wallet passphrases.

As is often the case with phishing attacks, MetaMask owners are receiving fraudulent emails. After following the link in the email to a fraudulent website made to resemble MetaMask, the users are encouraged to insert their seed phrases. At first glance, the emails appear to be authentic, but a fake domain and email address betray the culprits.

In June, Halborn already pointed to a security issue with MetaMask, concerning unencrypted private keys. MetaMask then promptly patched the issue.

Halborn was founded in 2019 by former “ethical hackers”. In July this year, it received $90 million in Series A funding. It has a reputation as a trustworthy firm. Therefore, MetaMask users, be extra careful when handling seemingly official MetaMask emails these days.