The official X account of the BNB chain blockchain network, with nearly four million followers, was compromised Wednesday. Hackers used the account to spread phishing links that target cryptocurrency wallets.
Binance founder Changpeng “CZ” Zhao confirmed The incident, warned his followers not to contact malicious posts containing phishing links. “The hacker posted a bunch of links to phishing websites requesting a wallet connect. Don’t connect your purse,” CZ wrote.
He added that BNB chain security teams have noted X and working to suspend the account and restore access. Zhao said takedown requests for phishing sites are already submitted.
A member of the BNB chain chain told Cointelegraph that their team is currently investigating and sharing additional information shortly.
Phishing links identified as Wallet Connect signals
Slowmist’s chief security official, who passed the handling of 23pds in X, Says Attacks use a classic trick, changing letters to phishing domain to make it legitimate.
“The BNB chain’s official X account is that -hack! The phishing website changed the letter I to L,” posting 23pds, users warned that it would not be deceived. The security professional also suggested that the malicious domain belongs to the deadly Inferno Phishing Group.
The Inferno drainer is a software droading of the crypto wallet and phishing-as-a-service platform that appeared around 2022 and gained popularity in 2023. It operates by allowing its affiliates to deploy ready phishing sites to mimic legitimate crypto project legitimate interfaces.
The incident features challenges in protecting the official crypto project accounts from takeovers. Slowmist Ciso suggested that the violation raises questions about team security skills.
“BNB chain security awareness should not be difficult,” 23PDs said.
Related: Hide your crypto: No Fall -So ‘Try My Game’ Discord Scam on Increasing
CZ warned users to carefully examine domains carefully
In his X post, Zhao advised community members to always review domains even when links come from official or proven social handles. “Always check the domains carefully, even from the official handling of X. Stay SAFU!” He wrote.
At the time of writing, phishing posts are no longer visible, but remain uncertain if any users connect their wallets or lose funds.
Magazine: Avalanche to deal with ETF Giant, Yuan Stablecoin ‘Fake News’: Asia Express
