PoisonSeed phishing campaign behind emails with wallet seed phrases

Caute_cautim — Sat, 12 Apr 2025 04:02:58 GMT

Hi All

A large-scale phishing campaign dubbed 'PoisonSeed' compromises corporate email marketing accounts to distribute emails containing crypto seed phrases used to drain cryptocurrency wallets.

According to SilentPush, the campaign targets Coinbase and Ledger using compromised accounts at Mailchimp, SendGrid, HubSpot, Mailgun, and Zoho.

The researchers link the campaign to recent incidents, such as the case of Troy Hunt's Mailchimp account compromise from late last month and an Akamai SendGrid account hack BleepingComputer reported in mid-March 2025, where the legitimate account was used to send out Coinbase seed phrase phishing emails.

https://www.bleepingcomputer.com/news/security/poisonseed-phishing-campaign-behind-emails-with-wallet-seed-phrases/

Happy reading - do you think cryptocurrency is still secure?

Regards

Caute_Cautim

Re: PoisonSeed phishing campaign behind emails with wallet seed phrases

dcontesti — Sat, 12 Apr 2025 07:39:00 GMT

A great read, thanks

topic PoisonSeed phishing campaign behind emails with wallet seed phrases in Threats

PoisonSeed phishing campaign behind emails with wallet seed phrases

Re: PoisonSeed phishing campaign behind emails with wallet seed phrases