BlockThreat - Week 43, 2020

Harvest | BurgerSwap | SS7 | Office 365 | Ledger

Phishing scams are on the rise with Office 365 and Ledger customers targeted last week. Old school SS7 exploits are still successfully used to take over email accounts belonging to folks in the industry. Another day, another DeFi project arbitraged for a few million stable coins and more in this week’s edition:

Crime

• Telegram and email accounts of high profile individuals in the crypto industry were hijacked by exploiting vulnerabilities in SS7 telco switches.

• A phishing campaign on Office 365 customers is using Coinbase themed emails in an attempt to take over their email accounts. Attackers are most likely trying to target users associated with the cryptocurrency exchange.

• Reports of a phishing campaign targeting Ledger users with a prompt to download an updated version of Ledger Live desktop software. It may be related to a recent leak of up to 1M email addresses belonging to Ledger customers.

• Finnish psychotherapy center patients are being extorted 200 euros in BTC to keep their stolen…