New metamask wallet scam

[wiggi]

https://twitter.com/MetaMask/status/1508906886610911233?s=20&t=Rm6oIm-IJdZqzT7u74nyJQ
"⚠️ PSA: There’s a new scam making the rounds - fake "mining" sites that ask you to join a "node.”

The site will attempt to connect to your wallet and get you to approve unlimited access to your tokens.

The second one is pretty bad, if I would get this notification while having a wallet unlocked in metamask with USDT in it, maybe I'd click automatically on "Approve".

Nothing can be done about it, Metamask (or a web browser) can't whitelist URLs. Users must know what they must know, things like "don't have critical and unnecessary stuff open in a web browser at the same time, browser extensions can read everything in the browser even while not visibly active at the moment, and metamask is a piece of software that doesn't know my email". (And if it knows my IP or my other Eth addresses then this is my own fault.)

[zasad@]

If it's from the real metamask wallet notification i will do the verification, but if not and i see it's from other source, i will ignore it because surely it's a phishing link or a fraud that wants to by pass our wallet using their copy paste strategy..

And obviously its not legit because I've been using metamask for how so long now and i don't have any such notifications for verification.

Thanks to you Op that you shared it here on the forum so that everyone will be aware also.

If you interact with any Defi project, then you need to give permission to the project to use your tokens. This is standard procedure. Bridges do not usually ask for such permissions, but exchangers, defi farming and similar projects need such permissions. Check your approvals from the links above. The most reliable way to store tokens on a wallet that you do not connect to projects.

[Cryptomiles1]

I can't really imagining myself falling prey for such cheap scam knowing too well it doesn't required any KYC for any operations. Most be sincerely speaking new comers might fall-in prey.

[Andam76]

should be more careful now more and more scams like that usually they target newbies, even I have seen in my local community group there are some who report about cases like this, what we can do is tell newbies to be aware of scams like this

[zasad@]

Protecting your Metamask wallet from Apple iCloud hacking
Guide from Metamask
https://twitter.com/MetaMask/status/1515727239391809536

"If you have enabled iCloud backup for app data, this will include your password-encrypted MetaMask vault. If your password isn’t strong enough, and someone phishes your iCloud credentials, this can mean stolen funds.
You can disable iCloud backups for MetaMask specifically by turning off the toggle here:
Settings > Profile > iCloud > Manage Storage > Backups.
If you want to avoid iCloud surprising you with unrequested backups in the future, you can turn off this feature at:
Settings > Apple ID/iCloud > iCloud > iCloud Backup"