Data from 100,000 crypto users with extensive phishing attack by Dark-Web-Leak disclosed

Data from 100,000 crypto users with extensive phishing attack by Dark-Web-Leak disclosed

  • Most affected users come from the USA, the United Kingdom and Singapore.
  • AI-based fraud increases the risk of identity theft.
  • Binance adds SMS verification to strengthen the phishing defense.

A new wave of data injuries in the crypto sector has compromised sensitive user data from large platforms such as Ledger, Gemini and Robinhood.

according to a current investigation divided onto Account X (formerly Twitter) A provider sells actively leaked information on the Dark Web, which reveals complete names, email addresses, home addresses, telephone numbers and postcodes.

This development represents a worrying escalation of cybersecurity threats in the crypto sector, whereby most of the persons concerned are based in the United States, followed by a smaller number of users from Singapore and the United Kingdom.

No statements published

On April 13, Dark Web Informer published screenshots, which show the extent of the compromised data records. The seller claimed to have comprehensive data on the user base of some of the largest retail cryptoplatts.

Despite the severity of the allegations, no official statements from Ledger, Robinhood or Gemini have been published.

This is not the first time that these companies are associated with data injuries. In 2021, Robinhood confirmed that attackers gained access to over 5 million email addresses and 2 million complete names by social manipulation of a customer service employee.

The latest leak seems to follow a similar pattern, although no internal system fellows have been found.

Phishing probably to blame, while AI frauds develop

cybersecurity experts connected to the Dark Web Informer Account indicates that phishing, not internal hacking, is the most likely cause of data exposure.

Instead of penetrating the platforms themselves, attackers directly seem to show users via fake websites, emails and text messages, imitate the official channels.

These tactics have become increasingly effective, in particular through the Integration of AI tools that generate convincing messages or Deepfkes and enable fraudsters to imitate exchanges or managers.

At the beginning of this month a separate data protection incident affected over 100,000 crypto users and also included similar personal data that mainly affected people based in the USA.

This indicates a growing trend in attacks that aim to take advantage of human errors instead of using system dusk.

AI fraud

The increase in phishing activities has not escaped users. Many reported fraud messages in the past few weeks, which apparently come from the official sender ID of Binance.

often specify to be SMS notifications for account verification and two-factor authentication.

In response to this, the Chief Security Officer from Binance explained that the stock exchange had strengthened its anti-phishing code program.

The update now includes SMS verification measures that aim to reduce the effectiveness of fake messages, according to a number of user complaints.

However, the increasing volume and the sophistication of phishing attacks emphasize the wider risks that are exposed to crypto users.

With the increase in AI-supported fraud and the widespread distribution of phishing kits, the platforms are forced to improve both the user education and real-time threat.

Platforms remain still

While the affected platforms are silent about the current data leak, the recurrence of such incidents ensures concern in the crypto community.

Without direct confirmation by Ledger, Gemini or Robinhood remains unclear whether the data injury is due to new vulnerability or recycled information from older attacks.

The fact that these leaks continue to appear underlines the urgent need for better protection of users and the transparency of service providers. While stock exchanges expand globally and attract millions of users, the risks have increased significantly.

In the absence of clear communication, users are asked to take additional precautionary measures, including the activation of the two-factor authentication, the review of official sources and the avoidance of links from unknown senders.

The contribution Dark-Web-Leak reveals data from 100,000 crypto users in a large-scale phishing attack first appeared on Coinjournal.