Cointelegraph website was hacked to promote a fake token airdrop by injecting a deceptive pop-up window on its homepage.
Attackers advertised a fictitious 'CoinTelegraph ICO Airdrop' offering fake CTG tokens and promising users a reward of $5,500 in exchange for connecting their wallets.
The tactic aimed to harvest sensitive wallet data and potentially drain funds from unsuspecting users.
To add credibility, attackers mentioned a non-existent audit by blockchain security firm CertiK in the fake airdrop scheme.
This method resembled a recent phishing campaign targeting CoinMarketCap users with similar wallet connection prompts.
Cointelegraph cautioned visitors not to interact with the pop-up, disclose personal details, or connect their crypto wallets during the ongoing investigation.
The company is currently looking into the breach to determine the duration of the malicious code's presence and any potential financial losses to users.