Metamask has been infiltrated

REPOST: This post was deleted by moderators at r/Metamask

​

I believe metamask has been infiltrated by bad actors. This is an odd story, but extremely serious. For backstory I have a lot of experience in crypto.

Read Below

​

Day 1: Metamask transaction issue starts.

​

Day 3: Submitted support ticket at metamask.zendesk.com

NOTE: The email that I used is a custom domain email, it has existed for less than six months and it has only been used on 1 website previous to this day. That website is axie infinity. I have never received a single spam email to this domain. So there's no possible way anyone could have known this email.

​

Day 7: Reply received from: [metamask.recoveryteam@gmail.com](mailto:metamask.recoveryteam@gmail.com) (obvious scam) The email stated "...please provide the wallet's 12-word seed phrase..."

Screenshot of reply: https://i.imgur.com/ai4dTYx.png

​

Today: Ticket on zendesk mysteriously disappeared.

​

FACTS:

Scammer knew I had submitted a support ticket

Scammer knew an extremely private domain name and the primary email attached to it; that was impossible to know outside of metamask and axie infinity staff.

I still have this issue and I still need actual metamask support. I have submitted a new support ticket today.

​

CONCLUSION:

There are two plausible conclusions. Conclusion 1, scammer has hacked into zendesk and modified the support tickets. Conclusion 2, scammer is a support staff member at metamask.

If you apply Occam's Razor to this issue, conclusion 2 becomes the most likely.

​

Alternative ways this is playing out with other users at this moment:

There are three logical ways this scam can go, they are listed below.

1. Email is ignored as an obvious scam, while yes this prevents funds from getting stolen the obvious drawback is the user still needs real support.

2. User replies with seed phrase. All users assets are stolen.

3. User responds with obscenities, I considered this path but it's not the right way to do things.

​

POTENTIAL SOLUTIONS:

1. Educate users more so on cryptocurrencies, this has already been done though various warnings when creating a wallet. Little more can be done here.

2. Metamask providing better support. I'm confident metamasks support is always improving as should be any companies support. Never the less you can always improve.

3. Use custodial wallets, the issue with this is you don't own the assets, it's no different than having money in a bank account. This is a silippery slope to additional loss of freedom that the crypto market once provided.

submitted by /u/tiecube
[link] [comments]

from Bitcoin - A Peer to Peer Electronic Cash System https://ift.tt/3E8DKv6