By The official X account of BNB Chain has been compromised, with Binance co-founder and former CEO Changpeng ‘CZ’ Zhao confirming the breach.
CZ said in a post on Wednesday morning that a malicious actor had compromised the BNB Chain’s X account, with the hacker publishing a series of posts with links to phishing websites.
Amid the vulnerability, users have been asked not to click on any of the links or connect their wallets.
What happened?
Zhao issued the alert via his official X account:
“ALERT: The BNBCHAIN X account is compromised. The hacker posted a bunch of links to phishing websites that ask for Wallet Connect. Do NOT connect your wallet.”
He also added that BNB Chain was working with security teams to have the account suspended before access is restored.
“Security teams have notified X already, working to suspend the account first, then restore access,” he noted, adding, “Also take-down requests to take down all phishing websites. Always check the domains very carefully, even from official X handles.”
The attacker’s series of malicious links directed BNB Chain users to phishing websites that prompted Wallet Connect requests.
ALERT 🚨: The @BNBCHAIN X account is compromised. The hacker posted a bunch of links to phishing websites that ask for Wallet Connect. Do NOT connect your wallet. Security teams have notified X already, working to suspend the account first, then restore access. Also take-down
One of the unauthorized posts asked the BNB Chain community to join a “BNB Hodler airdrop” campaign, and promised participants token rewards within the first 24 hours.
Crypto and phishing scams
Phishing is a common tactic cybercriminals use to gain unauthorized access to unsuspecting users’ crypto wallets.
In this case, the attacker targeted crypto holders connecting their wallets to the fraudulent links, a mistake that could result in significant financial losses.
Like in any other event, users are advised to always scrutinize domain names in links carefully, even when interacting with accounts purporting to be official.
Notably, malicious actors targeting social media platforms to perpetrate crypto scams have increased over the years. Phishing attacks have seen victims’ losses amounting to millions.
While the BNB Chain team acted swiftly, users have reacted to the attack as an example of the challenges crypto participants face.
One user noted that the major chains should do more to protect their user base, with security a proactive endeavour, not reactive.
When an official account gets compromised and starts pushing phishing links, it shows a serious failure in basic protection measures. People trust these verified handles for updates, and when that trust is broken the fallout is on the project, not just the hacker.
Another pointed out that X should do more to protect its users.
Ilan Rakhmanov, founder and CEO of ChainGPT, noted that the attack may have been a result of a BNB team member unknowingly granting permission to a malicious third party.
“Maybe someone on BNB’s team connected a malicious 3rd party with permission to post without knowing it’s a malicious application,” Rakhmanov posted.
Check the apps you’ve connected and disconnect all of them. They pretend to be apps like “Calendly” that are usually legit to connect.
The post BNB Chain X account compromised, promotes fake airdrops appeared first on Invezz
