SlowMist: MetaMask sees fake "2FA Security Verification" phishing attack, inducing users to enter their seed phrase
BlockBeats News, January 5th, SlowMist Technology Chief Security Officer @im23pds issued a warning that a new type of "2FA security verification" phishing scam has recently appeared in the MetaMask wallet. The scammer creates a fake MetaMask security alert page to guide users to complete a so-called two-factor authentication process, but their actual goal is to steal the mnemonic phrase. The process usually includes a forged security alert page, a fake 2FA verification interface with a countdown prompt, ultimately leading users to enter their wallet mnemonic phrase.
You may also like

WEEX Crypto News and the Dynamics of API Access
Key Takeaways Managing API access effectively is crucial for seamless data extraction in cryptocurrency markets. Understanding rate limits…

Traveling? ‘Evil Twin’ WiFi networks can steal crypto passwords
Key Takeaways “Evil Twin” WiFi attacks occur when hackers mimic legitimate WiFi networks to steal sensitive user data.…

ThunderChain Resumes Legal Battle as Former CEO Chen Lei Accused of Embezzlement for Cryptocurrency Speculation - What Happened Back Then?

Current Landscape of Cryptocurrency Exchanges in 2026
Key Takeaways The cryptocurrency exchange market is notably competitive, with each platform offering unique strengths to attract users.…

Error Prevented Content Extraction: Causes and Solutions
Key Takeaways Excessive requests can result in blocked access to data sources. Ensuring adherence to API usage policies…

A computation bug that allowed Truebit to be hacked for 8535 ETH

Vietnam Sets Mid-January Timeline for Pilot Crypto Exchange Approvals
Key Takeaways Vietnam aims to regulate its growing cryptocurrency market by licensing pilot digital asset exchanges under a…

Ledger Faces Yet Another Data Breach — Customer Information at Risk
Key Takeaways Ledger, the prominent hardware wallet manufacturer, has experienced another data breach via its payment processor, Global-e,…

2025 Crypto Violence Retrospective: Increasing Assaults and Fatal Incidents in a Growing Market
Key Takeaways Violent incidents involving cryptocurrency holders have escalated, with 2025 documenting 65 attacks, including 4 fatalities. The…

Court Sentences Criminal in Virtual Currency Fraud Case with Major Global Implications
Key Takeaways A landmark case in Beijing reveals a significant cross-border telecom and internet fraud scheme involving virtual…

Rep. Torres Targets Insider Trading on Prediction Markets Following Profitable Maduro Bet
Key Takeaways A substantial Polymarket wager concerning Maduro’s capture has led Rep. Ritchie Torres to propose new legislation…

Cybersecurity Firm Warns of Shai-Hulud 3.0 Threatening the NPM Ecosystem
Key Takeaways SlowMist’s CISO has issued a warning about Shai-Hulud 3.0, a significant threat targeting the NPM ecosystem…

SlowMist Warns of Return of Shai-Hulud 3.0 Supply Chain Attack
Key Takeaways SlowMist’s Chief Information Security Officer alerted the community about the resurgence of Shai-Hulud 3.0, an advanced…

Hackers Exploit Rainbow Six Siege Servers, Ubisoft Responds
Key Takeaways Hackers successfully breached Rainbow Six Siege, distributing enormous amounts of in-game currency. Players discovered unexpected changes…

Trust Wallet Investigates Browser Extension Security Incident
Key Takeaways A recent security incident in Trust Wallet’s browser extension has affected 2,596 wallets, leading to the…

Trust Wallet Users Experience $7 Million Loss Due to Hacked Chrome Extension
Key Takeaways Trust Wallet faced a significant security breach affecting its Chrome extension, resulting in over $7 million…

Trust Wallet Browser Extension Security Incident Leads to Losses
Key Takeaways Trust Wallet identified a significant security breach in its browser extension version 2.68. Approximately over $6…

Trust Wallet Hack Results in $3.5 Million Loss for Major Wallet Holder
Key Takeaways A significant Trust Wallet hack led to the theft of $3.5 million from an inactive wallet.…
WEEX Crypto News and the Dynamics of API Access
Key Takeaways Managing API access effectively is crucial for seamless data extraction in cryptocurrency markets. Understanding rate limits…
Traveling? ‘Evil Twin’ WiFi networks can steal crypto passwords
Key Takeaways “Evil Twin” WiFi attacks occur when hackers mimic legitimate WiFi networks to steal sensitive user data.…
ThunderChain Resumes Legal Battle as Former CEO Chen Lei Accused of Embezzlement for Cryptocurrency Speculation - What Happened Back Then?
Current Landscape of Cryptocurrency Exchanges in 2026
Key Takeaways The cryptocurrency exchange market is notably competitive, with each platform offering unique strengths to attract users.…
Error Prevented Content Extraction: Causes and Solutions
Key Takeaways Excessive requests can result in blocked access to data sources. Ensuring adherence to API usage policies…