Hack linked to notorious Inferno Drainer group, CZ urges caution
The official X account of BNB Chain, which has nearly four million followers, was hacked on Wednesday in a security breach that exposed the community to phishing links targeting cryptocurrency wallets.
Phishing Links Shared Through Compromised Account
According to Binance founder Changpeng “CZ” Zhao, the attacker used the account to spread links disguised as Wallet Connect prompts. “The hacker posted a bunch of links to phishing websites that ask for Wallet Connect. Do NOT connect your wallet,” Zhao warned.
Zhao confirmed that the BNB Chain security team has contacted X to suspend the compromised account while access is restored. He also noted that takedown requests for the phishing domains have already been submitted.
Security Experts Link Breach to Inferno Drainer
SlowMist’s chief security officer, known as 23pds, revealed that the phishing domains were tied to the Infamous Inferno Drainer group. The attackers reportedly used a letter-swapping technique to make fake websites appear legitimate.
“BNB Chain’s English official X account has been hacked! The phishing website changed the letter i into l,” 23pds explained, adding that this tactic has long been associated with Inferno Drainer affiliates.
The Inferno Drainer operation, which surfaced in 2022, offers “phishing-as-a-service” by providing prebuilt malicious websites that mimic crypto platforms, enabling affiliates to drain users’ wallets.
Concerns Over Security Practices
The incident raises fresh concerns about the security awareness of major blockchain projects. 23pds was critical of the lapse, stating: “The BNB Chain team’s security awareness shouldn’t be this poor.”
Zhao urged users to be vigilant: “Always check the domains very carefully, even from official X handles. Stay SAFU!”
At the time of writing, the phishing posts had been removed. However, it remains unclear if any users connected wallets or lost funds during the short-lived attack.
Disclaimer
This content is for informational purposes only and does not constitute financial, investment, or legal advice. Cryptocurrency trading involves risk and may result in financial loss.