Router maker's support portal responds with MetaMask phishing
ID: 06780f43-1d5c-5077-8f25-fb460d303c48
STIX ID: report--06780f43-1d5c-5077-8f25-fb460d303c48
Feed Name: Bleeping Computer
Threat Score
BleepingComputer verified that Mercku's Zendesk support portal is apparently compromised and is auto-responding to support tickets with MetaMask phishing emails that use URL userinfo obfuscation and a zpr.io shortener redirecting to a malicious .store domain; testers observed the final host suspended and Mercku was notified. Customers are advised to avoid the support portal and not click any links or respond to the phishing emails.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
