Crypto users are being warned to be careful with email newsletters in the coming days.

Several cryptocurrency companies have reported an ongoing "supply chain email breach attack" that targets newsletter vendors managing mailing lists for crypto firms. This breach involves malicious phishing links being sent to users via email newsletters, falsely promoting fake token launches. Bitfinex CTO Paolo Ardoino and CoinGecko founder Bobby Ong confirmed the attack, urging users to exercise caution with email communications related to crypto airdrops received recently.

Key Details:

1. Nature of the Attack:
- The attack exploits the email distribution systems of a prominent vendor used by multiple crypto companies. Hackers send phishing emails, misleading recipients into clicking on harmful links that can steal personal information or access crypto wallets.

2. Confirmation from Industry Leaders:
- Bobby Ong highlighted that several crypto companies might be affected, advising vigilance against fake token launch emails.
- Paolo Ardoino also confirmed the breach, cautioning users to be wary of emails promoting crypto airdrops received more than 24 hours ago.

3. Impact and Response:
- The exact extent of financial loss due to this breach remains unclear. Users are being warned to be particularly cautious about emails and to avoid clicking on suspicious links.

4. Phishing Techniques:
- Phishing involves tricking victims into clicking malicious links that can either drain personal information or directly compromise online crypto wallets.

Implications:

This incident underscores the importance of cybersecurity vigilance within the crypto industry, particularly concerning third-party services handling sensitive information like mailing lists. Users and companies must remain alert to potential phishing attempts and validate the authenticity of received communications.