{"id":4014,"date":"2023-02-14T07:15:46","date_gmt":"2023-02-14T07:15:46","guid":{"rendered":"https:\/\/shreshtait.com\/blog\/?p=4014"},"modified":"2025-09-30T12:02:25","modified_gmt":"2025-09-30T06:32:25","slug":"phishing-targeting-metamask-users","status":"publish","type":"post","link":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/","title":{"rendered":"Phishing targeting MetaMask users"},"content":{"rendered":"\n<p>Security researchers at <a href=\"https:\/\/shreshtait.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Shreshta<\/a>&nbsp;, using our threat intelligence platform SDINET, have identified a phishing website targeting MetaMask users. A <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/namecheaps-email-hacked-to-send-metamask-dhl-phishing-emails\/\" target=\"_blank\" rel=\"noreferrer noopener\">phishing campaign<\/a> targeting MetaMask users has been doing the rounds on the internet.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-about-metamask\">About MetaMask<\/h5>\n\n\n\n<p>MetaMask is a software cryptocurrency wallet used to interact with the Ethereum blockchain. It allows users to access their Ethereum wallet through a browser extension or mobile app, which can then be used to interact with decentralised applications.<sup><a href=\"https:\/\/en.wikipedia.org\/wiki\/MetaMask\" target=\"_blank\" rel=\"noreferrer noopener\">1<\/a><\/sup><\/p>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-phishing-website-metamask-securityupdate-com-mm-impersonating-metamask\">Phishing website metamask-securityupdate[.]com\/mm impersonating MetaMask<\/h5>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"563\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/phishingwebsite-1024x563.png\" alt=\"Phishing website metamask\" class=\"wp-image-4015\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/phishingwebsite-1024x563.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/phishingwebsite-300x165.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/phishingwebsite-768x422.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/phishingwebsite-1536x844.png 1536w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/phishingwebsite.png 1600w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Image- screenshot of phishing website<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-phishing-website-page-metamask-securityupdate-com-mm-with-a-random-metamask-secret-phrase\">Phishing website page metamask-securityupdate[.]com\/mm with a random MetaMask secret phrase<\/h5>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"564\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-entered-1024x564.png\" alt=\"Phishing page of Metamask prompting the user to connect their Metamask wallet\" class=\"wp-image-4018\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-entered-1024x564.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-entered-300x165.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-entered-768x423.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-entered-1536x845.png 1536w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-entered.png 1597w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Image &#8211; screenshot of randomly entered MetaMask secret phrase<\/figcaption><\/figure>\n\n\n\n<p>The phishing website prompts the user to enter the user&#8217;s MetaMask secret phrase to connect the user&#8217;s account.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-phishing-page-metamask-securityupdate-com-mm-accepts-the-fake-phrase-and-shows-a-message\">Phishing page metamask-securityupdate[.]com\/mm accepts the fake phrase and shows a message<\/h5>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"564\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-accepted-1024x564.png\" alt=\"Phishing page of Metamask displaying wallet connected message\" class=\"wp-image-4020\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-accepted-1024x564.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-accepted-300x165.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-accepted-768x423.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-accepted-1536x845.png 1536w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/fake-detail-accepted.png 1597w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Image &#8211; screenshot of MetaMask wallet getting connected<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-threat-indicator-s\"><strong>Threat Indicator<\/strong>s<\/h5>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The domain name metamask-securityupdate[.]com was registered by Internet Domain Service BS Corp<\/li>\n\n\n\n<li>Domain name registration date &#8211; 04-02-2023<\/li>\n\n\n\n<li>The domain name resolves to the IP address 5.199.173.215<\/li>\n\n\n\n<li>The IP address 5.199.173.215 belongs to AS16125(UAB Cherry Servers)<\/li>\n\n\n\n<li>AS16125(UAB Cherry Servers) is based in Lithuania (Europe)<\/li>\n\n\n\n<li>The phishing website accepts any phrase that has been entered<\/li>\n\n\n\n<li>The phishing website fails to display an error message when a random phrase is submitted<\/li>\n\n\n\n<li>The phishing page automatically redirects the user to the official website of the MetaMask <sup><a href=\"https:\/\/metamask.io\/\" target=\"_blank\" rel=\"noreferrer noopener\">1<\/a><\/sup><\/li>\n<\/ul>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-the-actual-phrase-recovery-page-of-metamask\">The actual phrase recovery page of MetaMask<\/h5>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1013\" height=\"797\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/official-account-recoverypage.png\" alt=\"Phrase recovery page on MetaMask legitimate website\" class=\"wp-image-4025\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/official-account-recoverypage.png 1013w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/official-account-recoverypage-300x236.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/official-account-recoverypage-768x604.png 768w\" sizes=\"auto, (max-width: 1013px) 100vw, 1013px\" \/><figcaption class=\"wp-element-caption\">Image &#8211; screenshot of reset password page of Actual MetaMask<\/figcaption><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-the-actual-reset-password-page-of-metamask\">The actual reset password page of MetaMask<\/h5>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1020\" height=\"524\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/official-reset-password.png\" alt=\"Reset password page on MetaMask legitimate website\" class=\"wp-image-4035\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/official-reset-password.png 1020w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/official-reset-password-300x154.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/official-reset-password-768x395.png 768w\" sizes=\"auto, (max-width: 1020px) 100vw, 1020px\" \/><figcaption class=\"wp-element-caption\">Image &#8211; screenshot of password reset using the secret phrase<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">\u26a0\ufe0fMetaMask does not collect KYC info and will never email you about your account!<br>Do not enter your Secret Recovery Phrase on a website EVER.<br>If you got an email today from MetaMask or Namecheap or anyone else like this, ignore it &amp; do not click its links!<a href=\"https:\/\/t.co\/EP0HGZFOfo\">https:\/\/t.co\/EP0HGZFOfo<\/a> <a href=\"https:\/\/t.co\/4CDtne24OK\">pic.twitter.com\/4CDtne24OK<\/a><\/p>&mdash; MetaMask.eth \ud83e\udd8a (@MetaMask) <a href=\"https:\/\/twitter.com\/MetaMask\/status\/1625006237023866880?ref_src=twsrc%5Etfw\">February 13, 2023<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><figcaption class=\"wp-element-caption\">Tweet &#8211; MetaMask notifies its users and advises them not to click on any links.<\/figcaption><\/figure>\n\n\n\n<p>Never share your Secret Recovery Phrase (SRP) with anyone. Sharing your SRP with someone would be like handing over the PIN code to your bank card or the keys to your house. It would allow that person to access and transfer all of your funds. The MetaMask team will never ask you for it. If anyone or any website asks you to share it, they\u2019re trying to scam you.<sup><a href=\"https:\/\/metamask.zendesk.com\/hc\/en-us\/articles\/360060826432-What-is-a-Secret-Recovery-Phrase-and-how-to-keep-your-crypto-wallet-secure#:~:text=Your%20Secret%20Recovery%20Phrase%20(SRP,your%20wallet%20and%20your%20funds.\" target=\"_blank\" rel=\"noreferrer noopener\">1<\/a><\/sup><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security researchers at Shreshta&nbsp;, using our threat intelligence platform SDINET, have identified a phishing website targeting MetaMask users. A phishing campaign targeting MetaMask users has been doing the rounds on the internet. About MetaMask MetaMask is a software cryptocurrency wallet used to interact with the Ethereum blockchain. It allows users to access their Ethereum wallet [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":4243,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[53,42],"tags":[50,45,75,76,78,48,47],"class_list":["post-4014","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sdinet","category-threat-intelligence","tag-campaign","tag-dns","tag-domain-name","tag-india","tag-metamask","tag-phishing","tag-threat-intelligence"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Phishing targeting MetaMask users<\/title>\n<meta name=\"description\" content=\"Security researchers at Shreshta, have identified a phishing website targeting MetaMask, a cryptocurrency wallet.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Phishing targeting MetaMask users\" \/>\n<meta property=\"og:description\" content=\"Security researchers at Shreshta, have identified a phishing website targeting MetaMask, a cryptocurrency wallet.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/\" \/>\n<meta property=\"og:site_name\" content=\"DNS Security &amp; Threat Intelligence Blog | Shreshta\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-14T07:15:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-30T06:32:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_illustration_of_bitcoin_logo_fading_away_abstract_167fd66e-d1cc-452a-b8f4-74c01f784f07.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"896\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Pranay Patil\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@shreshtait\" \/>\n<meta name=\"twitter:site\" content=\"@shreshtait\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pranay Patil\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/\"},\"author\":{\"name\":\"Pranay Patil\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/person\\\/675cf497a40c89e71d50bbac3e1288b6\"},\"headline\":\"Phishing targeting MetaMask users\",\"datePublished\":\"2023-02-14T07:15:46+00:00\",\"dateModified\":\"2025-09-30T06:32:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/\"},\"wordCount\":369,\"publisher\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/pswapneel_illustration_of_bitcoin_logo_fading_away_abstract_167fd66e-d1cc-452a-b8f4-74c01f784f07.png\",\"keywords\":[\"campaign\",\"dns\",\"domain name\",\"india\",\"metamask\",\"phishing\",\"threat intelligence\"],\"articleSection\":[\"SDINET\",\"Threat Intelligence\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/\",\"name\":\"Phishing targeting MetaMask users\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/pswapneel_illustration_of_bitcoin_logo_fading_away_abstract_167fd66e-d1cc-452a-b8f4-74c01f784f07.png\",\"datePublished\":\"2023-02-14T07:15:46+00:00\",\"dateModified\":\"2025-09-30T06:32:25+00:00\",\"description\":\"Security researchers at Shreshta, have identified a phishing website targeting MetaMask, a cryptocurrency wallet.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/#primaryimage\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/pswapneel_illustration_of_bitcoin_logo_fading_away_abstract_167fd66e-d1cc-452a-b8f4-74c01f784f07.png\",\"contentUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/pswapneel_illustration_of_bitcoin_logo_fading_away_abstract_167fd66e-d1cc-452a-b8f4-74c01f784f07.png\",\"width\":1344,\"height\":896,\"caption\":\"Phishing targeting metamask users\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2023\\\/02\\\/phishing-targeting-metamask-users\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Phishing targeting MetaMask users\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\",\"name\":\"DNS Security &amp; Threat Intelligence Blog | Shreshta\",\"description\":\"DNS Security &amp; Threat Intelligence\",\"publisher\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\",\"name\":\"Shreshta IT Technologies Pvt. Ltd.\",\"alternateName\":\"Shreshta\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Shreshta.svg\",\"contentUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Shreshta.svg\",\"width\":330,\"height\":76,\"caption\":\"Shreshta IT Technologies Pvt. Ltd.\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/shreshtait\",\"https:\\\/\\\/infosec.exchange\\\/@shreshta\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/shreshta\\\/\"],\"description\":\"DNS security and threat intelligence company providing real-time threat protection for organizations worldwide. Our solutions include DNS Shield (Protective DNS), DNS Watchtower (Passive DNS), and comprehensive threat intelligence feeds. Trusted by enterprises to detect, prevent, and investigate cyber threats at the DNS layer.\",\"email\":\"sales@shreshtait.com\",\"legalName\":\"Shreshta IT Technologies Pvt. Ltd.\",\"foundingDate\":\"2014-01-22\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"11\",\"maxValue\":\"50\"},\"publishingPrinciples\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/blog\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/person\\\/675cf497a40c89e71d50bbac3e1288b6\",\"name\":\"Pranay Patil\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/Screenshot-2023-01-27-at-11.09.13-PM.png\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/Screenshot-2023-01-27-at-11.09.13-PM.png\",\"contentUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/Screenshot-2023-01-27-at-11.09.13-PM.png\",\"caption\":\"Pranay Patil\"},\"sameAs\":[\"https:\\\/\\\/shreshtait.com\\\/blog\"],\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/author\\\/pranay\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Phishing targeting MetaMask users","description":"Security researchers at Shreshta, have identified a phishing website targeting MetaMask, a cryptocurrency wallet.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/","og_locale":"en_US","og_type":"article","og_title":"Phishing targeting MetaMask users","og_description":"Security researchers at Shreshta, have identified a phishing website targeting MetaMask, a cryptocurrency wallet.","og_url":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/","og_site_name":"DNS Security &amp; Threat Intelligence Blog | Shreshta","article_published_time":"2023-02-14T07:15:46+00:00","article_modified_time":"2025-09-30T06:32:25+00:00","og_image":[{"width":1344,"height":896,"url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_illustration_of_bitcoin_logo_fading_away_abstract_167fd66e-d1cc-452a-b8f4-74c01f784f07.png","type":"image\/png"}],"author":"Pranay Patil","twitter_card":"summary_large_image","twitter_creator":"@shreshtait","twitter_site":"@shreshtait","twitter_misc":{"Written by":"Pranay Patil","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/#article","isPartOf":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/"},"author":{"name":"Pranay Patil","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/person\/675cf497a40c89e71d50bbac3e1288b6"},"headline":"Phishing targeting MetaMask users","datePublished":"2023-02-14T07:15:46+00:00","dateModified":"2025-09-30T06:32:25+00:00","mainEntityOfPage":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/"},"wordCount":369,"publisher":{"@id":"https:\/\/shreshtait.com\/blog\/#organization"},"image":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/#primaryimage"},"thumbnailUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_illustration_of_bitcoin_logo_fading_away_abstract_167fd66e-d1cc-452a-b8f4-74c01f784f07.png","keywords":["campaign","dns","domain name","india","metamask","phishing","threat intelligence"],"articleSection":["SDINET","Threat Intelligence"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/","url":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/","name":"Phishing targeting MetaMask users","isPartOf":{"@id":"https:\/\/shreshtait.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/#primaryimage"},"image":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/#primaryimage"},"thumbnailUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_illustration_of_bitcoin_logo_fading_away_abstract_167fd66e-d1cc-452a-b8f4-74c01f784f07.png","datePublished":"2023-02-14T07:15:46+00:00","dateModified":"2025-09-30T06:32:25+00:00","description":"Security researchers at Shreshta, have identified a phishing website targeting MetaMask, a cryptocurrency wallet.","breadcrumb":{"@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/#primaryimage","url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_illustration_of_bitcoin_logo_fading_away_abstract_167fd66e-d1cc-452a-b8f4-74c01f784f07.png","contentUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/02\/pswapneel_illustration_of_bitcoin_logo_fading_away_abstract_167fd66e-d1cc-452a-b8f4-74c01f784f07.png","width":1344,"height":896,"caption":"Phishing targeting metamask users"},{"@type":"BreadcrumbList","@id":"https:\/\/shreshtait.com\/blog\/2023\/02\/phishing-targeting-metamask-users\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/shreshtait.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Phishing targeting MetaMask users"}]},{"@type":"WebSite","@id":"https:\/\/shreshtait.com\/blog\/#website","url":"https:\/\/shreshtait.com\/blog\/","name":"DNS Security &amp; Threat Intelligence Blog | Shreshta","description":"DNS Security &amp; Threat Intelligence","publisher":{"@id":"https:\/\/shreshtait.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/shreshtait.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/shreshtait.com\/blog\/#organization","name":"Shreshta IT Technologies Pvt. Ltd.","alternateName":"Shreshta","url":"https:\/\/shreshtait.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/03\/Shreshta.svg","contentUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/03\/Shreshta.svg","width":330,"height":76,"caption":"Shreshta IT Technologies Pvt. Ltd."},"image":{"@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/shreshtait","https:\/\/infosec.exchange\/@shreshta","https:\/\/www.linkedin.com\/company\/shreshta\/"],"description":"DNS security and threat intelligence company providing real-time threat protection for organizations worldwide. Our solutions include DNS Shield (Protective DNS), DNS Watchtower (Passive DNS), and comprehensive threat intelligence feeds. Trusted by enterprises to detect, prevent, and investigate cyber threats at the DNS layer.","email":"sales@shreshtait.com","legalName":"Shreshta IT Technologies Pvt. Ltd.","foundingDate":"2014-01-22","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"},"publishingPrinciples":"https:\/\/shreshtait.com\/blog\/blog\/"},{"@type":"Person","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/person\/675cf497a40c89e71d50bbac3e1288b6","name":"Pranay Patil","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/01\/Screenshot-2023-01-27-at-11.09.13-PM.png","url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/01\/Screenshot-2023-01-27-at-11.09.13-PM.png","contentUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/01\/Screenshot-2023-01-27-at-11.09.13-PM.png","caption":"Pranay Patil"},"sameAs":["https:\/\/shreshtait.com\/blog"],"url":"https:\/\/shreshtait.com\/blog\/author\/pranay\/"}]}},"_links":{"self":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/4014","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/comments?post=4014"}],"version-history":[{"count":36,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/4014\/revisions"}],"predecessor-version":[{"id":7868,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/4014\/revisions\/7868"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/media\/4243"}],"wp:attachment":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/media?parent=4014"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/categories?post=4014"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/tags?post=4014"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}