Fake Lawsuit Threat Exposes Privnote Phishing Sites
Summary: A person using the GitHub handle fory66399 threatened to sue MetaMask after its eth-phishing-detect list flagged privnote[.]co, and MetaMask lead product manager Taylor Monahan responded with screenshots showing the site swapped cryptocurrency addresses in messages. The episode exposed a network of Privnote lookalike domains, including tornote[.]io, privatenote[.]io, pirvnota[.]com and privnode[.]com, that alter crypto payment addresses in notes and rotate those addresses roughly every five days.
Why it matters: Four malicious addresses swapped into notes on privnote[.]co alone took in and moved out nearly $18,000 in cryptocurrency between March 15 and March 19, 2024, and that is one site out of the network.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026