Several users of bankrupt crypto speech FTX are being targeted by a imaginable phishing onslaught aft being sent a "reset password" petition from the exchange's authoritative lawsuit enactment email.
The email, which has been reviewed and verified by CoinDesk, was sent by support@ftx.com - the authoritative email code earlier the speech collapsed successful November.
The password reset nexus routes to the FTX claims portal that allows users to taxable bankruptcy claims for assets they held connected the level earlier its demise.
Mossab Hussein, co-founder of cybersecurity steadfast Spidersilk, said the astonishing emails tin beryllium attributed to 1 of 2 options: "It's either FTX itself sending those emails [to notify them of the claims portal] and giving radical a scare. Or, idiosyncratic has "a list" of emails and is bruteforce resetting their credentials via the portal."
If a hacker gained entree to user's idiosyncratic email addresses, they could feasibly summation entree to a claimant's relationship and divert funds to their idiosyncratic wallet.
FTX spokespersons didn't respond to petition for remark immediately.
On Monday, galore FTX users received an email from Kroll, the restructuring administrators of FTX, explaining that the deadline for claims is acceptable for September 29, 2023.
FTX owes astir $8.1 cardinal to customers aft it imploded successful a excavation of leverage and illiquid tokens past November successful an lawsuit that ravaged the wider crypto market.
Edited by Aoyon Ashraf.