Crypto Executives Fall Victim to Sophisticated Phishing Scam,Losing $250K in Ethereum
In a startling incident that highlights the persistent threat of online fraud,two executives from the prominent crypto exchange Moonpay have reportedly lost approximately $250,000 worth of Ethereum due to a cunning phishing attack.The victims, believed to be Moonpay’s CEO Ivan Soto-Wright and CFO Mouna Ammari siala, were tricked into believing they were donating to the inauguration of former American President Donald Trump.
The elaborate scam, detailed in a report filed wiht the U.S.Department of Law, involved a subtle yet effective manipulation of an email address. The fraudsters exploited the visual similarity between the letters ‘I’ and ‘L’ in sans-serif fonts, altering the legitimate email address associated with the Trump inauguration committee. Rather of the correct “stevewitkoff@t47lnagural.com,” the victims received communications from a spoofed address, “stevewitkoff@t47lnagural.com.”
This seemingly minor alteration was enough to deceive the Moonpay executives, who proceeded to transfer a significant amount of Ethereum to the fraudulent wallet. Transaction records obtained from Binance indicate that the wallet used by the perpetrators was registered under the name Eehemen Aigbokhan, a Nigerian national residing in Lagos. Further analysis of IP addresses consistently pointed to Nigeria as the origin of the fraudulent communications, suggesting that Aigbokhan received the illicit funds via international wire transfers.
The incident underscores the evolving tactics employed by cybercriminals, who are increasingly targeting high-profile individuals and organizations within the cryptocurrency space. moonpay, a crypto exchanger established in 2019, has previously faced scrutiny, including a class-action lawsuit related to it’s promotion of NFT Bored Ape Yacht. This latest incident serves as a stark reminder for all users, particularly those in leadership positions, to exercise extreme caution and vigilance against sophisticated phishing attempts.