MetaMask users targeted in Namecheap email scam

Crypto wallet holders were targeted this weekend when domain registrar #Namecheap was hacked, allowing scammers to send out a raft of phishing emails impersonating #MetaMask and DHL, reports BleepingComputer.

Namecheap’s email system was breached on Sunday and messages attempting to steal personal details and crypto wallets were fired out via the company’s email platform SendGrid. This is the email system used by Namecheap to deliver its renewal notices and marketing emails.

The breach was discovered when users flagged the emails on Twitter. According to would-be victims, the messages either claimed to be a bill for a DHL delivery or a MetaMask know-your-customer (KYC) verification email. The MetaMask email read:

“We are writing to inform you that in order to continue using our wallet service, it is important to obtain KYC (Know Your Customer) verification. KYC verification helps us to ensure that we are providing our services to legitimate customers.

“By completing KYC verification, you will be able to securely store, withdraw, and transfer funds without any interruptions. It also helps us to protect you against financial fraud and other security threats.

“We urge you to complete KYC verification as soon as possible to avoid suspension of your wallet,” (via BleepingComputer). ... https://www.youtube.com/watch?v=uZPSt6KoHg8