Blog.ethereum.org Mailing List Incident

In a recent incident reported on the Ethereum Foundation Blog, a phishing email was sent to 35,794 email addresses from updates@blog.ethereum.org. The email contained a link to a malicious website that aimed to drain users' wallets through a crypto drainer. Immediate actions were taken by the internal security team, including preventing further emails, notifying users not to click the link, and blocking the malicious domain. The investigation revealed that the threat actor imported their email list and obtained 3759 email addresses from the blog mailing list. Fortunately, no funds were lost during this specific campaign. Additional security measures, such as migrating some mail services to other providers, are being implemented to prevent similar incidents. The Ethereum Foundation expressed regret over the incident and assured ongoing collaboration with internal and external security teams to address the issue. For further inquiries, individuals are encouraged to contact security@ethereum.org.