⚠️ Warning! New phishing & wallet drainer at airdrop-proton[.]com targeting protonxpr users!

? Origin of attacker: RU
✉️ Email: [email protected]
⚒ Payload: kaunta.rogu[.]online hosted @Hostinger
☁️ Both domains proxied via @CloudflareHelp

Sharing is caring: https://twitter.com/alvosec/st....atus/163562200280640

⚠️ Warning! New phishing wallet drainer at airdrop-proton[.]com targeting @ProtonXPR users!

? Origin of attacker: RU
✉️ Email: [email protected]
⚒️ Payload: kaunta.rogu[.]online hosted @Hostinger
☁️ Both domains proxied via @CloudflareHelp pic.twitter.com/ShK6xi10KQ

Alvosec ⚛️Ⓜ️ (@alvosec) March 14, 2023