NGRAVE Details $2.56 Million Phishing Attack That Used Fake Wallet Alerts

TL;DR: NGRAVE says attackers hijacked a notification provider used by LIQUID, directing users to a fake recovery-page and stealing at least $2.56 million. A convincing security notification became the entry point for a costly crypto phishing campaign. Hardware wallet maker NGRAVE says a third-party provider used to send LIQUID app alerts was compromised, allowing attackers to push a fake warning to customers on October 17. The notification directed recipients to a website resembling NGRAVE’s own pages. People who entered their recovery phrase or Perfect Key handed the attacker the information needed to take their funds.

Source: Bitcoinist