Attack on Polygon and Fantom: hacker pretended to be Ankr employee

A new DNS attack occurs in the crypto community. Fantom and Polygon were hacker targets that started by fooling the vigilance of Ankr’s DNS provider, especially their customer service, and gaining access to the domain name registry to then attack Fantom and Polygon.

Hack on Fantom and Polygon

On July 1 morning, a hacker created a phishing pop-up he posted, targeting Fantom and Polygon users. The warning was issued by a Twitter account named CIA:

https://twitter.com/officer_cia/status/1542829400143568897

To succeed, the scammer first tried to fool Ankr’s DNS provider (third party domain name system), gave it access to the RPC (remote procedure call, remote procedure call interface) of both the Polygon and Fantom networks.

Specifically, the hacker posed as an employee of Gandi, an Ankr DNS hosting web service. By sending a fake ID to Gandi’s customer service, he requested to change the email address of the Ankr domain administrator, replacing it with another email address he had provided to them.

The above information has also been confirmed by Polygon’s Chief Information Security Officer, Mudit Gupta. In the meantime, users are advised to switch to alternate links or change node providers.

More and more sophisticated scam methods are used in cryptocurrency scams so users need to update their information and be very careful during transactions to avoid loss of assets.

DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.

Join CoinCu Telegram to keep track of news: https://t.me/coincunews

Follow CoinCu Youtube Channel | Follow CoinCu Facebook page

Foxy

CoinCu News

Attack on Polygon and Fantom: hacker pretended to be Ankr employee

A new DNS attack occurs in the crypto community. Fantom and Polygon were hacker targets that started by fooling the vigilance of Ankr’s DNS provider, especially their customer service, and gaining access to the domain name registry to then attack Fantom and Polygon.

Hack on Fantom and Polygon

On July 1 morning, a hacker created a phishing pop-up he posted, targeting Fantom and Polygon users. The warning was issued by a Twitter account named CIA:

https://twitter.com/officer_cia/status/1542829400143568897

To succeed, the scammer first tried to fool Ankr’s DNS provider (third party domain name system), gave it access to the RPC (remote procedure call, remote procedure call interface) of both the Polygon and Fantom networks.

Specifically, the hacker posed as an employee of Gandi, an Ankr DNS hosting web service. By sending a fake ID to Gandi’s customer service, he requested to change the email address of the Ankr domain administrator, replacing it with another email address he had provided to them.

The above information has also been confirmed by Polygon’s Chief Information Security Officer, Mudit Gupta. In the meantime, users are advised to switch to alternate links or change node providers.

More and more sophisticated scam methods are used in cryptocurrency scams so users need to update their information and be very careful during transactions to avoid loss of assets.

DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.

Join CoinCu Telegram to keep track of news: https://t.me/coincunews

Follow CoinCu Youtube Channel | Follow CoinCu Facebook page

Foxy

CoinCu News

Visited 43 times, 5 visit(s) today