Social Engineering MetaMask email update

[Myleschetty]

I'm not sure if this has been shared here before, but it might be helpful to highlight the issue for the newbies, especially since social engineering is becoming increasingly common. It is reported that approximately 76% of the total $20.9 billion lost to cybercrime last year was attributed to social engineering tactics.

What happened: I was checking my email when I found a message I had overlooked hours earlier. It appeared to be from the MetaMask team, requesting that I perform a mandatory update that is applicable to every user and must be completed within 24 hours, with a link to proceed with the update which coded to look like the genuine team message.

What I did: Since I am familiar with the MetaMask team's email, I verified whether the message was actually from them, and I detected that it was a scam email.

[Amphenomenon]

Working with urgency, one of the schemes of social engineering. Making targeted individuals feel such will make them have limited attention on any flaws they could have questioned or verify.


I have come to notice various schemes of social engineering in most scams attacks or attempts that I read or come across and it's enough reason to give full attention to it because while a system can be 100% secure, social engineering brings the vulnerability.

[Japinat]

Always keep in mind that if you did not ask for support, you should not suddenly receive an email from MetaMask, so when you receive one like that it's already a red flag.

And when it comes to updates, since MetaMask is a browser extension, obviously the update should happen through the extension or official browser store, not by connecting your wallet through some link from an email.

This is really just a simple trick that anyone can detect if they educate themselves. Since we are holding important crypto assets, it is also our responsibility to know these basic things and not just trust every email that looks official.

[fullfitlarry]

Good move by your side, at least you verify it before clicking that link. Because once you click that link and gave your seed it's over for you. By now everyone should really be aware of this kind of trick from scammers.

Not just MetaMask, but every services connected to crypto can be used by this hackers and scammers to steal our precious crypto. Not going to be the first, but not the last at all. So just stay vigilant and again, verify everything and do your due diligence.

[SquirrelJulietGarden]

What I did: Since I am familiar with the MetaMask team's email, I verified whether the message was actually from them, and I detected that it was a scam email.

You even don't need to know the official emails of Metamask and only need to know basics of company emails to realize that the email used to send that phishing information to you is a scam one.

This email address is no way from Metamask, read the email address which has no relation to Metamask brand.

Code:

re-reply@express.medallia.com

Phishing scams are not new and this is a very classic scam method. If people are careful, ready to learn about most common scam methods in order to proactively prepare their knowledge and necessary basic skills to detect scams, they will not fall to this phishing scams and lose money.
The cryptocurrency scambook.
[GUIDE] Use this for identifying Scam/Phishing Websites & Exchanges in Crypto.
[Tutorial] How To Report Phishing Email & Create Auto Delete Filter - Gmail User.
Tool for catch phishing.
[LEARN & EARN] Phishing Quizzes - Beginners & Experts.

Learn about more scam methods and scam cases, not only about phishing.
[General] Crypto scams, attacks and malware

[$crypto$]

Email updates from Metamask are mostly fake and sent from emails that are not clear not from its official, not only that you do a search on Google, Yandex, DuckduckGo, also often phishing sites metamask name at the top of the appeal of the official link.

Because metamask has a lot of users --- 30 million monthly active users, more than 100 million people who have downloaded this wallet, so this is the target of hackers to decompose your wallet.
https://coinlaw.io/metamask-wallet-statistics/

There are many ways to avoid this and I think it's easy, just read and be more thorough.

[RGBTC]

We shouldn't focus solely on where an email originates, because from a broader perspective, the real issue is that your information has been compromised. I believe all personal information holds value, and a criminal can use more than just an email address to ensnare a victim. The more information they possess about you, the harder it becomes to distinguish a scam from a seemingly legit communication.

[Mitchell]

Locked and moved to archival. Please post in the general thread if it is something new.