lots of sophisticated phishing attacks going around lately. all of these have been attempted on me. sadly seen a lot of cases where people did lose funds in these ways:
- real person (hacked) you've interacted before DMs you on TG and asks to catch up, send a zoom, looks like a real-ish zoom URL, asks you to download a client to "fix" audio, everything drained
- credible/real news org DMs you out of the blue on their official X account, asks for an interview, send you to a (fake) TG account, sends the (fake but real-looking) zoom link. this has happened to me with (major) news orgs that didn't even know they were hacked
- one of your "colleagues" asks for funds via email, email looks real, but headers are faked
- blitz of messages saying your coinbase has been hacked, yadda yadda, "support" calls and asks you to move your assets to a temporary address with some time pressure ("the "hackers" submitted the transaction but you still have time!")
general rules of thumb (not exhaustive)
- use @CasaHODL
- use @River for a custodial option
- don't keep a ton of funds on browser wallets like m*tamask or ph*ntom
- don't google crypto platforms and click the first link (hackers buy ads to put fake links in there)
- secure everything, not just wallets. this includes google, telegram, icloud, etc.
- don't answer phone calls from "support". hang up and call back on the official support line if you have to
- don't trust anything you hear on the phone especially if you're being pressured to do something
- don't answer calls from unknown numbers even if they seem like they're from "Google" or "Coinbase"
- be suspicious of emails or DMs from your "colleagues". know that email headers can be faked (ask AI for help analyzing headers if youre suspicious)
- double check that DMs from "friends" are real and they haven't been hacked
- make sure you have physical 2fa + authy/google authenticator on everything
- avoid SMS based 2fa wherever possible