Cointelegraph has fallen victim to a front-end attack that briefly turned its website into a phishing trap, luring unsuspecting users with a fraudulent token airdrop offer.
The breach, confirmed by Cointelegraph, allowed attackers to inject a deceptive pop-up window into the homepage, promoting a fictitious “CoinTelegraph ICO Airdrop” and advertising fake CTG tokens. Users were promised a reward of $5,500 in exchange for connecting their wallets — a tactic designed to harvest sensitive wallet data and potentially drain funds.
To lend credibility to the scheme, the attackers referenced a non-existent audit allegedly conducted by blockchain security firm CertiK. The ploy closely resembles a recent phishing campaign that targeted users on CoinMarketCap using similar wallet-connection prompts.
Cointelegraph has urged all visitors not to click on the pop-up, not to link their crypto wallets, and under no circumstances to share personal information on the site while the issue is being addressed.
The company is currently investigating the breach and has not yet disclosed how long the malicious code remained active or whether any users suffered financial losses.
Source: https://coindoo.com/cointelegraph-website-hacked-to-promote-fake-token-airdrop/