🔐 Push alerts just became an attack vector.
NGRAVE's new report: attackers stole a third-party notification service's key and sent FAKE "security alerts" to LIQUID app users on Oct 17 — claiming wallets were synced with a device in Moscow. Both Approve AND Deny led to a phishing page demanding the 24-word recovery phrase. $2.56M drained from 70 wallets across 4 chains.
Hardware was fine. The notification layer was the malware.
Never type your seed phrase ANYWHERE. Ever.
$BTC
NGRAVE's new report: attackers stole a third-party notification service's key and sent FAKE "security alerts" to LIQUID app users on Oct 17 — claiming wallets were synced with a device in Moscow. Both Approve AND Deny led to a phishing page demanding the 24-word recovery phrase. $2.56M drained from 70 wallets across 4 chains.
Hardware was fine. The notification layer was the malware.
Never type your seed phrase ANYWHERE. Ever.
$BTC