Crypto scams targeting MetaMask users are using government-owned website URLs to con victims and access their crypto wallet holdings.
Ethereum-based crypto wallet MetaMask has been a long-standing target for scammers — which involves redirecting unwary users to fabricated websites that request access to the MetaMask wallets. Cointelegraph’s investigation on the matter found numerous government-owned websites being used to perpetrate this exact scam.
Official government websites from India, Nigeria, Egypt, Colombia, Brazil, Vietnam and other jurisdictions have been found redirecting to fake MetaMask websites, as shown below.
MetaMask scammers use government websites to steal from crypto users. Source: Cointelegraph (via Google)
Cointelegraph alerted MetaMask about the ongoing scams and received an immediate acknowledgment. According to the MetaMask security team, Web3’s incredible growth potential makes the ecosystem attractive for scammers and thieves.
Once a user clicks on any of the rogue links placed within the government website URLs, they are redirected to a fake URL instead of the original URL “MetaMask.io.” Once accessed, Microsoft’s built-in security — Microsoft Defender — warns users about a possible phishing attempt.
Microsoft’s warning against the MetaMask phishing websites. Source: Cointelegraph
If users ignore the warning, they are greeted by a website resembling the official MetaMask website. The fake websites will eventually ask the users to link their MetaMask wallets to access various services on the platform.
Comparison between the original and fake MetaMask websites. Source: Cointelegraph
The above screenshot shows the similarity between the real and fake MetaMask websites, which is one of the main reasons investors fall for the scam. Linking MetaMask wallets on such websites gives scammers complete control over the assets held on those particular MetaMask wallets.
With regards to the phishing websites uncovered by Cointelegraph, MetaMask security team stated:
“We are building in some heuristics (metadata, indicators, TTPs, etc) from this current campaign into our detection engines to hopefully detect any more of these attacks as soon as they launch and take steps to taking them down before they reach users – or at the very least minimize the exposure.”
In lieu of growing attacks on crypto investors, MetaMask also encourages potential victims to report on possible scams.
In case of a seed phrase compromise, MetaMask advises users to stop using the seed recovery phrase and create a new one from a device that has not been compromised. Readers are also advised to note that MetaMask does not collect KYC information from its users.
The wallet provider said the 5,000 ETH was stolen “from various addresses across 11 blockchains,” reaffirming the claim that funds were hacked from MetaMask “is incorrect.”
Speaking to Cointelegraph, Wallet Guard co-founder Ohm Shah said the MetaMask team has been “researching tirelessly,” and there is “no solid answer to how this has happened.”
Collect this article as an NFT to preserve this moment in history and show your support for independent journalism in the crypto space.
Schoolteacher Marc Fogel returned to the US on Feb. 11 as part of a deal with Russian authorities that will reportedly include the release of Alexander Vinnik.
A leak inquiry will take place following reports that economic growth forecasts have been reduced by the government’s financial watchdog.
Bloomberg reported that the Office for Budget Responsibility (OBR) had reduced its growth forecasts in data sent to Chancellor Rachel Reeves last week.
Reduced growth could force the government to cut further spending or increase more taxes.
The next forecast is set to be published in March – with the process supposed to remain confidential until that point.
The inquiry was confirmed by James Bowler, the most senior civil servant in the Treasury.
He told the House of Commons Treasury Committee: “We will undertake an inquiry, and I’m happy to communicate the outcome of that.”
The government’s attempts to grow the UK economy have proved difficult since the election last year, and businesses have complained about measures introduced in Ms Reeves’s first budget.
Part of Labour’s plan involves increasing house building and development, although these plans were not included in the forecasts for last October’s budget.
Mr Bowler sought to play down the fact that a leak inquiry was happening meant that what was reported by Bloomberg was true.
Asked by committee chair Meg Hillier about the inquiry, the civil servant appeared to indicate about 50 people in the Treasury would have been able to see the forecasts.
Please use Chrome browser for a more accessible video player
3:02
Bank of England issues growth blow
He said an investigation into OBR officials would likely also happen, although the body is independent of government.
Downing Street has tried to remain bullish about the economic situation.
A Number 10 spokesperson said: “In recent weeks and months, the [Organisation for Economic Co-operation and Development] and the [International Monetary Fund] have upgraded our growth forecast over the next three years.”
They added: “The government remains relentlessly focused on growth as the only way of sustainably raising living standards and delivering the investment that we need in our public services.”
Both bodies mentioned slightly increased their growth forecasts, but they still remain below 2%.
Last week, the Bank of England halved its growth expectations for the UK – saying it would only increase by 0.75% in 2025, before increasing to 1.5% for the next two years.
Spreaker
This content is provided by Spreaker, which may be using cookies and other technologies.
To show you this content, we need your permission to use cookies.
You can use the buttons below to amend your preferences to enable Spreaker cookies or to allow those cookies just once.
You can change your settings at any time via the Privacy Options.
Unfortunately we have been unable to verify if you have consented to Spreaker cookies.
To view this content you can use the button below to allow Spreaker cookies for this session only.