NGRAVE Details $2.56 Million Phishing Attack That Used Fake Wallet Alerts

TL;DR: NGRAVE says attackers hijacked a notification provider used by LIQUID, directing users to a fake recovery-page and stealing at least $2.56 million. A convincing security notification became the entry point for a costly crypto phishing campaign. Hardware wallet maker NGRAVE says a third-party provider used to send LIQUID app alerts was compromised, allowing attackers to push a fake warning to customers on October 17. The notification directed recipients to a website resembling NGRAVE’s own pages. People who entered their recovery phrase or Perfect Key handed the attacker the information needed to take their funds. In its October 19 incident report, NGRAVE said it had traced approximately $2.56 million taken from about 70 wallet addresses across four networks.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Bitcoinist.