In a recent incident, the marketing email for Hedera, a popular blockchain network, was compromised by cybercriminals. The attackers sent out phishing emails to Hedera's subscribers, posing as representatives of the development team.

The Hedera team quickly acknowledged the hack and warned users not to interact with any links or emails from the compromised marketing@hedera address. Phishing scams often lure victims by offering enticing rewards, such as token airdrops, in exchange for connecting their wallets to fake websites that appear to be legitimate.

Once the user connects their wallet, the attacker can gain unauthorized access and drain the funds. The Hedera team has not yet disclosed the specific details of the phishing emails, but they have promised to provide more information soon.

In another incident, security researchers discovered a critical vulnerability in the MoveIt file transfer software developed by Progress. The flaw allowed attackers to impersonate any user on an enterprise network, as long as they knew the victim's username.

The attack involved supplying the server with a username and a fake private key file path. Due to a peculiarity in the software's handling of this situation, the authentication would appear to fail, but the attacker would still be granted access.

In a separate case, an address poisoner managed to steal $70,000 from a victim by exploiting their trust in a familiar-looking Binance deposit address. The attacker sent fake USDT tokens to the victim's account, which contained a malicious transfer function. The victim then accidentally sent 70,000 USDT to the attacker's similar-looking address, thinking it was their Binance deposit address.

These incidents serve as a reminder to crypto users to be cautious when clicking links, even from seemingly trusted sources, and to double-check all characters of an address before sending funds. As the Hedera case demonstrates, even reputable organizations can fall victim to hacks, and users must remain vigilant to protect their assets.