Crypto Investors Targeted in New Airdrop Scam

Numerous users of the cryptocurrency analytics platform Nansen have fallen victim to phishing attempts by scammers promoting an enticing yet entirely fictitious opportunity known as the “Nansen Airdrop.”

This malicious campaign came to light on November 23 when vigilant members of the cryptocurrency community on X (formerly Twitter) flagged ongoing phishing activities targeting Nansen’s user base.

In these fraudulent schemes, the scammers masquerade as Nansen and distribute counterfeit invitations to an exclusive airdrop event.

Crypto investigator Officer’s Notes (Officercia) first alerted the community to the ongoing attack, suspecting that the scammers may have obtained user data from a prior third-party database breach and are now exploiting it to target Nansen users.

The breach in question occurred on September 22 when one of Nansen’s third-party vendors suffered a security breach, impacting nearly 7% of the system’s users.

Those affected by the breach had their email addresses exposed, some had password hashes compromised, and a few even had their blockchain addresses compromised.

READ MORE: Cryptocurrency Industry Calls for Greater Self-Regulation Amid Binance Investigation

Nansen had promptly responded by identifying and notifying the affected users, urging them to change their passwords.

Importantly, Nansen reassured users that their wallet funds remained unaffected by the breach.

One screenshot of a phishing email, shared with Cointelegraph, revealed that the sender’s address was “mail@networkforgood.com,” a completely unrelated email domain to the legitimate Nansen platform.

The fraudulent email promised users a guaranteed allocation of fake NANSEN tokens for the next 48 hours, accompanied by a link that potentially directed unsuspecting victims to a rigged website.

Officercia advises individuals to report suspected phishing links to databases such as chainabuse.com, cryptoscamdb.org, and phishtank.org, all of which contribute to the collective effort in reducing the success rates of such cyberattacks.

Despite these alarming developments, Nansen has not yet responded to Cointelegraph’s request for comment on the phishing campaign.

It’s worth noting that an increasing number of cryptocurrency investors are becoming susceptible to phishing attempts, especially in the wake of recent data leaks from platforms like TrueCoin and FTX bankruptcy claims.

However, Friend.tech has denied allegations of a data leak involving its database of over 100,000 users, asserting that the information in question was obtained through scraping its public API and did not result from a security breach.

Source