CoinMarketCap experts have recorded a new wave of fraud in the crypto sector, aimed at developers and managers of Web3 projects. Fraudsters send emails from fake domains team-coinmarketcapcom and contact-coinmarketcapcom, using the CMC logo to make the emails look authentic. The scammers also create fake profiles on the X social network, imitating CoinMarketCap employees, using their photos and personal data.
Having gained the trust of a potential victim, the scammers invite developers to an “online meeting” on Zoom. During the call, they ask to change the interface language to Polish, supposedly for taking notes. After that, a pop-up window appears offering to provide remote access to the screen. Many meeting participants agree, not realizing the danger.
Once access is gained, the attackers launch malware that instantly steals credentials and wipes the victims' crypto wallets. CoinMarketCap notes that several well-known crypto industry participants have already suffered from such attacks.
The platform emphasized that the authors of CMC materials are freelancers and cannot offer publications directly to crypto projects. All decisions about publication are made by the CoinMarketCap editorial team. The platform's real journalists do not use official emails to directly contact developers and do not promise guaranteed articles - any such offers are fraudulent.
This is not the first warning: in June, CoinMarketCap already reported phishing emails on behalf of the platform aimed at stealing users' personal data and their crypto assets. Experts remind about the need to verify the authenticity of emails and not provide remote access to strangers.
Being careful when communicating with unknown contacts and being mindful of email addresses and social media profiles remain key ways to protect your digital assets.