Mogilevich

Bloomberg’s Twitter account was hacked to circulate phishing malware

The crypto world got a taste of irony when Bloomberg’s official crypto Twitter account got hijacked, turning the situation into a phishing playground for unsuspecting users.

The attackers somehow waltzed into the Bloomberg Crypto Twitter account, spicing things up by adding a link to the @BloombergNewsCrypto Telegram channel. Now, here’s where it gets interesting. This channel used to be legit but was left in the dust last summer for the new and improved @BloombergCrypto channel. But, it turns out the old one was still hanging with around 14,000 members, providing the hackers with an extra layer of credibility.

The mischievous minds then guided users to a Discord channel – a common spot in the crypto universe. The bait? Stealing Discord tokens. The scammers, quite boldly, said, “If you are interested, please head over to our official and only discord server for more information.” The link they shared, though, wasn’t the real deal (https://altdentifier.com/). Nope, it was altdentifiers[.]com, a trap where users unwittingly handed over their Discord login data.

To make it more nerve-racking, victims had a mere 30 minutes to complete this risky process. The phishing site even threw in a fancy message, claiming, “The server administrators have implemented additional security measures.”

The hero of the story? Crypto fraud investigator ZachXBT, who spotted the scam and sounded the alarm. Bloomberg swooped in, shutting down the scheme less than an hour after the alert. Lesson learned: even the big shots need to stay on their toes in the wild world of crypto.