Beware of new phishing attempt (Celsius network new distribution)

[uneng]

Just got an email today claiming it's from Celsius lending platform, where there are still supposely funds to be withdrawn. The email is pretty clean, and it could look totally legit if it wasn't for the email sender having "Magnolia Baby" on its @. Be careful to not fall for this scam attempt.

The link above had its domain registered recently. Maybe the scammers want to collect personal data from Celsius' investors through KYC process. If you were a Celsius investor or know someone who was, inform them about this email as well.

[BenCodie]

A clear phishing attempt to for identity theft. Quite dangerous, and oddly specific that it was toward celsius network. Were you a part of celsius network and if so, wouldn't this be a sign that celsius member email data was either leaked, compromised or sold?

[uneng]

A clear phishing attempt to for identity theft. Quite dangerous, and oddly specific that it was toward celsius network. Were you a part of celsius network and if so, wouldn't this be a sign that celsius member email data was either leaked, compromised or sold?

Yes, I had funds at the platform and I've gone through the whole refunding process conducted by the court in New York where we got about 33% of our funds back. But it's already quite a time since it happened and was concluded.

Now there are scammers deceiving investors into believing there is still money to be reclaimed. And yes, I'm pretty sure it's a clear signal of data leak. Since Celsius was a platform ran by scammers, I don't doubt someone from there could have leaked the data from the userbase.

After all, it's extra profit on their pockets, especially when selling data from a very specific list of users who could have heavy money invested on the platform.

[BenCodie]

A clear phishing attempt to for identity theft. Quite dangerous, and oddly specific that it was toward celsius network. Were you a part of celsius network and if so, wouldn't this be a sign that celsius member email data was either leaked, compromised or sold?

Yes, I had funds at the platform and I've gone through the whole refunding process conducted by the court in New York where we got about 33% of our funds back. But it's already quite a time since it happened and was concluded.

Now there are scammers deceiving investors into believing there is still money to be reclaimed. And yes, I'm pretty sure it's a clear signal of data leak. Since Celsius was a platform ran by scammers, I don't doubt someone from there could have leaked the data from the userbase.

After all, it's extra profit on their pockets, especially when selling data from a very specific list of users who could have heavy money invested on the platform.

I see, that explains it. I would hope that all who were refunded through celsius have grown some experience since then and that no one fell victim to the scam...though like always I am sure out of all claimants, there will be a portion who believe the scam.

[logfiles]

I think there was a data leak of sorts that wasn't reported. Remember the FTX claimant data leak saga? - Sensitive data leaked in Kroll cybersecurity breach — Report . I wouldn't be surprised if the same happened to the Celsius Network folks.
The claimant information is a gold mine for scammers and identity thieves since the information shared very sensitve.

OP, I think it might be a good Idea to include what the phishing attempt is about in the title. Something like (Beware of new Celsius network claims phishing attempt)

[Zwei]

wouldn't this be a sign that celsius member email data was either leaked, compromised or sold?

i bet it's one of the employees who worked at Celsius and had access to users emails info for marketing or something like that.
he probably sold that data, or maybe he is trying to cash in on it himself.

@uneng, you should check your email on haveibeenpwned.com. if there was a leak/hack, it should show you where and when it was exposed.

[uneng]

wouldn't this be a sign that celsius member email data was either leaked, compromised or sold?

i bet it's one of the employees who worked at Celsius and had access to users emails info for marketing or something like that.
he probably sold that data, or maybe he is trying to cash in on it himself.

@uneng, you should check your email on haveibeenpwned.com. if there was a leak/hack, it should show you where and when it was exposed.

Interesting... I checked my email on the website you mentioned and just discovered it has been found in multiple data breaches since 2015.

Formally, the tool discovered 8 data leaks, although nothing related to Celsius was mentioned. But I'm sure there were many other leaks during the last 10 years involving my email.

[joniboini]

I wonder if this is related to the recent phishing emails I've received lately. They're not trying to imitate exchanges, though, but other services like Mozilla, X, freelancing platforms that I used in the past, and occasionally crypto scams. Some of the emails managed to bypass the filter that my provider used, so it's a bit worrying.

Formally, the tool discovered 8 data leaks, although nothing related to Celsius was mentioned. But I'm sure there were many other leaks during the last 10 years involving my email.

Always best to assume the worst for a case like this anyway. Some scammers even try to spam your email to log in to various services, at least that's what happened to me.

[btc_angela]

I wonder if this is related to the recent phishing emails I've received lately. They're not trying to imitate exchanges, though, but other services like Mozilla, X, freelancing platforms that I used in the past, and occasionally crypto scams. Some of the emails managed to bypass the filter that my provider used, so it's a bit worrying.

Formally, the tool discovered 8 data leaks, although nothing related to Celsius was mentioned. But I'm sure there were many other leaks during the last 10 years involving my email.

Always best to assume the worst for a case like this anyway. Some scammers even try to spam your email to log in to various services, at least that's what happened to me.

I recently receive about Binance and other exchanges too, but their modus is very different, like saying that you need to update my info or certain coins that I have is going to be delisted. In any case it's a clear phishing attempt so I just deleted it.

I guess having the experience or being here in the community somewhat has made us to not really trust everything we got from our emails. So thanks to the OP for bringing this up. As the price of Bitcoin hitting all time high, this scammers are ramping it up their activity as well.

[Zwei]

Interesting... I checked my email on the website you mentioned and just discovered it has been found in multiple data breaches since 2015.

Formally, the tool discovered 8 data leaks, although nothing related to Celsius was mentioned. But I'm sure there were many other leaks during the last 10 years involving my email.

that's not good 
if you use this email for important stuff, you really need to be extra extra vigilant.

have you never got phishing emails for other stuff before, or was this the first time?
cause with 8 data leaks and a 10 year old email, i would imagine your inbox is full with spam and phishing attempts.

[BenCodie]

wouldn't this be a sign that celsius member email data was either leaked, compromised or sold?

i bet it's one of the employees who worked at Celsius and had access to users emails info for marketing or something like that.
he probably sold that data, or maybe he is trying to cash in on it himself.

@uneng, you should check your email on haveibeenpwned.com. if there was a leak/hack, it should show you where and when it was exposed.

Interesting... I checked my email on the website you mentioned and just discovered it has been found in multiple data breaches since 2015.

Formally, the tool discovered 8 data leaks, although nothing related to Celsius was mentioned. But I'm sure there were many other leaks during the last 10 years involving my email.

Deleting any unused accounts (as well as the routine password change + 2FA checkup) and creating a new email (e.g with proton) to separate your personal and private accounts from other online accounts) might be warranted.