Warning!

[Fivestar4everMVP]

Yes, it's a warning to the newbies and the entire community, please be vigilant everyone, if you are new in crypto, be extra ordinary careful, most scam attempts are targeted at the new comers.

If you are using metamask on your pc, then you all are warned to be careful visiting etherscan, dextools, coingecko etc.

Why?

Please check this thread : https://bitcointalk.org/index.php?topic=5398606.0

I  make this post here to reach out to all the newbies in this community and warn them all, because they are the ones that will fall for this scam the most.

[1714692464]

1714692464

[1714692464]

1714692464

[1714692464]

1714692464

[1714692464]

1714692464

[Cookdata]

This attack appears to be affecting all websites that display Coinzilla ads on their pages. I was going through Cointelegraph when I came across the above image, and the official announcement stated that Coinzilla has been infiltrated, and any website that is now running ads for them would most likely see them on their websites.

Pointing toward the possible cause of the attack, @Noedel19, a member of Crypto Twitter, connected the ongoing phishing attacks to the compromise of Coinzilla, an advertising and marketing agency, stating that “Any website that makes use of Coinzilla Ads are compromised.”

Official source: https://cointelegraph.com/news/etherscan-coingecko-warn-against-ongoing-metamask-phishing-attacks

Avoid these websites for now, if you want to use Coingecko to check prices, make use of mobile devices until the problem is rectified.

[Widdop37]

PC wallets my foot 👎, we need to find a way to run crypto wallets offline, this is the only solution I can think of right now, online is making crypto wallet security looks stupid.

[PX-Z]

PC wallets my foot 👎, we need to find a way to run crypto wallets offline, this is the only solution I can think of right now, online is making crypto wallet security looks stupid.

You will need more resources to get that solution. If you say wallet that works offline that means blockchain can work offline too, sending crypto on-chain offline is not possible right now.
If this kind of malware is in the ad script, simple ad blocker such as uBlock Origin is a simple solution for this, also the user's knowledge how things work.

[aysg76]

There have been substantial rise in these scams where users are promoted with such adds and when they click on it malwares are installed on your system draining out your funds from metamask extension on your device or will ask you to connect the device but you should be extra careful in such cases.

PC wallets my foot 👎, we need to find a way to run crypto wallets offline, this is the only solution I can think of right now, online is making crypto wallet security looks stupid.

Online is risky but you see there are some security protocols that you need to follow in order to remain unaffected.You can't connect to other nodes if you are offline and you need internet to pop up the transaction on the blockchain so how until offline facility is available across the globe what do you plan to do?

Like in the above case you will have to connect your metamask wallet to claim free NFT and all the funds and NFT in your wallet will be gone before you could do anything but you see there is mistake on the user's end like he wanted to have that free NFT showing greed and then also giving access to wallet so what do you expect then?

In case of offline wallet if someone ask you to show your device to them will you do it? So why do we don't accept our mistakes?

[Pmalek]

Avoid these websites for now, if you want to use Coingecko to check prices, make use of mobile devices until the problem is rectified.

I think that it has already been fixed by Coingecko. They released a statement on Twitter advising users to still be careful but also stating that the ad script has been disabled (https://twitter.com/coingecko/status/1525238360847134720).

There is absolutely no reason for a site like CoinGecko to request that you log in or connect to any wallet to browse the site. Anyone who thinks clearly should know that. It would be like Bitcointalk asking for your seed while logging in to your forum account.

[dkbit98]

If you are using metamask on your pc, then you all are warned to be careful visiting etherscan, dextools, coingecko etc.

Or just don't use shitty Metamask wallet while you are browsing internet, or even better stop using ethereum wth all other shitcoin tokens and you will be much safer.
This is really the source of the problem, and scammers are only building on top of this bad software and making use of many bugs to steal funds from people.
I would uninstall metamask and all similar extensions from main browser, and only use dedicated browser for this.

[BIT-BENDER]

Great one mate, thanks for educating Newbies and in general Everyone about this threat that was oblivious to many, but also I would like to add that every newbies have to work on themselves, yes that is the first and important step to avoid scam, the first line that every scammers would like to infiltrate, because if the intended prey wall is broken the rest is history, so every one needs to work on their emotions especially the greed part if they are to prevent such situations.

[Ziskinberg]

Indeed, you may be wondering why you need to connect your wallet to Metamask in the first place? If you don't just think about it and then tried to log in and put in your credentials, it is certainly will be the end of your day.

I also visited the Coingecko site but never I've experienced this one, maybe this is just about to happen in a very short period of time that only a few got notice of this and then sends reports. Well, the good thing is that it was resolved already and I appreciate their fast action. It is a need for us now to be more vigilant and careful in our actions especially when it asks for login information.

[sheenshane]

If you are using metamask on your pc, then you all are warned to be careful visiting etherscan, dextools, coingecko etc.

Or just don't use shitty Metamask wallet while you are browsing internet, or even better stop using ethereum wth all other shitcoin tokens and you will be much safer.
This is really the source of the problem, and scammers are only building on top of this bad software and making use of many bugs to steal funds from people.
I would uninstall metamask and all similar extensions from main browser, and only use dedicated browser for this.

I tend to agree with this and it's good advice, to separate a PC that dedicates to this and doesn't use your main PC that your extension wallet installed.
But it doesn't make sense upon visiting the site you will connect your browser wallet without a reason for using it, so it's common sense to us to smell the scam attempt.  Altcoins are prone to scams, and also scammers day by day become desperate of stealing naive people's fund.

BTW, thanks for the heads up!
They targeted newbies because they know it has low skills when it comes to handling wallet, especially those bounty hunters, but it might it's a small chunk that they will scam because usually those who visit that site most are bounty hunters.

[Mpamaegbu]

Avoid these websites for now, if you want to use Coingecko to check prices, make use of mobile devices until the problem is rectified.

This is one of the things that irks me about using PCs. It's very easy to get attacked and malware infection. This could be due to unlimited access to sites on PCs which are shrunk in phones for the sake of capacity. Users should be careful running sites on their devices. As a rule of thumb, I've a policy of saving relevant sites I visit on my homepage. I think that has been saving me a great deal from phishers.

[Blue King]

PC wallets my foot 👎, we need to find a way to run crypto wallets offline, this is the only solution I can think of right now, online is making crypto wallet security looks stupid.

You are right because if PC wallet is hacke then we have to use offline wallet.We have to be careful about this.Wallet hacking is caused by some fake tokens.If a fake token is added to the token wallet, there is a possibility of being hacked a lot.

[libert19]

Don't click metamask confirmations you didn't initiate for. You can avoid most attacks just by this.