Hackers Compromise Ethereum Mailing List to Send Phishing Emails Directing Subscribers to Crypto Drainers

The Ethereum Foundation disclosed a phishing campaign on June 23 that abused a compromised [email protected] account to send a fake staking offer (6.8% APY) to 35,794 recipients. Recipients who clicked the “Begin staking” link were taken to a convincing fraudulent website designed to drain crypto wallets; the Foundation blocked the attacker, notified the community, added the link to blocklists, and on-chain analysis found no successful thefts.