Cointribne victim of a massive phishing via his newsletter

In a digital context where threats are multiplying, Cointribne unfortunately does not escape the rule. For a few hours, our media has been the target of a phishing attempt directly targeting our audience through our newsletter. It is essential to quickly inform you of the situation and give you the keys to protect you.

What is a phishing attempt?

Phishing, or “bans” in French, is a cyber attack technique aimed at deceiving a user to extract sensitive information (identifiers, passwords, banking data, etc.) or encourage him to click on a malicious link. Most often, the attack takes the form of an email or a message imitating a source of confidence, an company, an institution or, in this specific case, a media.

These fraudulent messages are designed to appear credible. They use logos, colors, editorial tone and shipping addresses close to those of the usurped entity. Their objective is clear: to click on a trapped link or push you to interact with content that will compromise your personal data or your crypto wallet.

Phishing is one of the most common threats in the web3 sector, where assets are directly accessible via digital wallets. A single click may be enough to empty a wallet or compromise access to a platform.

🎯 An attack that targets readers of our newsletter

The attempted phishing currently underway, specifically targets subscribers to our newsletter. Cybercriminals, in all likelihood, had access to our contact base, which allowed them to send a fraudulent e-mail almost perfectly imitating our official communications.

The email comes from the address [email protected] And announces the launch of a false token $ CTB, presented as a native of Cointribun. Under the pretext of a free token allowance, recipients are encouraged to click on a “Claim Now” button to connect their web3 portfolio.

Here is an extract:

“You are eligible to receive tokens as part of the new $ CTB distribution program! […] Please connect your web 3 portfolio via our secure portal below ”.

It is a scam. Cointribuni has never launched token $ CTB, no distribution. The objective of the pirates is to get you to connect your portfolio to a trapped interface to take control or empty your funds.

Their message perfectly regains our graphic charter, our editorial tone, and even the visual header of our usual newsletters, which makes it particularly dangerous for uninformed readers.

Faced with this attack, our team immediately took the following measures:

• Technical survey to identify the exploited flaw;
• Strengthening the security of our substack infrastructure;
• Awareness campaign to alert and protect our community.

How to identify and avoid the trap: our advice to stay safe

As part of this attack, cybercriminals use a false domain name very close to ours to broadcast their fraudulent emails. This method is known as Domain Spoofing, and it aims to create confusion in the mind of the reader.

• The fraudulent domain detected is: [email protected];
• Our one and only official domain remains: Cointribne.com.

This subtle difference, adding a dash and a letter, can go unnoticed to fast reading. This is precisely what hackers are looking for: playing on confidence and visual habit.

Some simple rules to protect you

• Do not click on any link contained in a suspicious email;
• Never communicate your personal information or identifiers as a result of an undeclaged solicitation;
• Immediately remove any email from questionable or unofficial addresses;
• Note these emails by transferring them to: [email protected]

How to recognize our real emails?

• Always check the full sender address. Our official communications only come from @cointribun .com or via substack, identifiable by the substack.com domain.
• If in doubt, do not click anything: go directly to our Cointribne.com site to verify the information.
• Our social communications are done exclusively via our official accounts.

Need assistance?

If you have any doubts or if you think you have been the victim of this phishing attempt, immediately contact our team at the following address:[email protected].

We want to apologize to our readers for this incident and assure you that everything is done to restore the integrity of our service. This kind of event recalls how essential vigilance is in the crypto ecosystem.

Cointribuni remains more than ever engaged for reliable, secure and transparent information.