🚨LEGITIMATE GOOGLE EMAILS CAN STILL PHISH YOU!🚨 Imagine receiving a phishing email from a REAL Google domain... ✅ Legit "From" Google address ✅ SPF: PASS ✅ DKIM: PASS ✅ DMARC: PASS And it's STILL a scam (Scam that's been ongoing since 2023...)👀 Scammers are abusing legitimate Google email notification workflows to send phishing messages that pass traditional email authentication checks... Here's how the attack works⤵️ - Scammers manipulate a Google app or notification name to display a fake security warning such as "Fake app login", "Subpoena", and others.. The display shows the "App Name" but the "App Name" the scammer puts is the scam text... - Google sends the notification from its legitimate infrastructure, making the email appear trustworthy... - The email includes a legit link to your google account that leads to a dead end and a phone number to call if you need any support or assistance.. - The victim gets confused, calls the number, and the social engineering begins.... 📞THAT PHONE CALL IS THE TRAP! The attacker doesn't necessarily need a malicious link when they can convince YOU to call them... 🔐SO HOW DO YOU PROTECT YOURSELF NOW THEN? ✅ Still Check the sender "From": Expand the From field and inspect the actual address. ✅ Check authentication: In Gmail, open the three-dot menu in top left of email → Show original → Review SPF, DKIM, and DMARC, ensure it shows 'PASS' ⚠️ BUT HERE'S THE IMPORTANT PART TO CHECK NOW: Even if ALL THE ABOVE CHECKS PASS, the email can still be malicious! Authentication verifies aspects of where an email came from, NOT whether its contents are trustworthy. 🚩 Never call support numbers provided in unexpected security emails. 🚩 Don't trust an email simply because it came from a legitimate domain. 🚩 Open the company's official website or app yourself and independently verify the alert. Scammers are finding ways to exploit the very systems we rely on to identify legitimate emails. Your best defense isn't just checking WHO sent an email. It's verifying WHAT they're asking you to do. Stay Safe & Stay Vigilant

⚠️How can you tell a DNS is Hijacked when you visit an official website?..⚠️ At least 12+ domains got hijacked last night, serving wallet drainer code on their official website.. All but 5 have now moved their DNS to Vercel/Cloudflare to mitigate and those 5 are still compromised, DO NOT VISIT! The URL can be 100% correct, but the website you're visiting can still be malicious. This compromise did not break anything from the teams flow, setup, compromise anything they did, it appears someone inside name(.)com (The registrar) change the nameservers to the domains. If you use them as a registrar I would consider moving away and at minimum setup cloudflare for hosting/filtering. If you are a user, there really isn't a way to detect this unless you are checking WhoIs, DNS updates, ASN numbers, and many more which most don't. The only way to tell is that when you go to the website it will ask for your seed phrase/private key, or prompt you to sign an odd transaction. The transaction part is tough to spot which is why I recommend always using @RevokeCash extension to help spot this for you with the transaction simulator... If you are a business and not using cloudflare, let's talk, this is basic proper security on domains outside of domain lock, etc. You have to be prepared ahead of time to prevent/mitigate this in an instance moment! Stay Safe & Stay Vigilant

💰4 ways to find crypto you FORGOT you owned💰 With the holidays coming, why not take 5 minutes to see if you have crypto sitting somewhere you completely forgot about? 👀 Here are 4 websites worth checking ⤵️ 1.) - Recover ETH stuck in old smart contracts 2.) - Withdrawals never finished, staking withdrawals never claimed, balances left behind in old contracts. If the last step never happened, the money is still there. 3.) - Your dashboard for all funds related to your privvy wallet(s) 4.) - Replace your wallet address with the one above in the url to see all funds on all chains ⚠️SECURITY REMINDER⚠️ You can check public wallet balances without connecting your wallet. NEVER enter your seed phrase, and always verify websites and transactions before claiming anything. Stay Safe & Stay Vigilant

How to Securely claim your Mudwater packs for BAYC & MAYC💡 If you haven't heard @BoredApeYC announced Mudwater a phygital TCG game where every Bored Ape can claim 10 packs & every Mutant Ape can claim 2 packs!! However there are important steps to do this securely, which I will show you how to do in this thread🧵⤵️ 1️/ Official Links 2/ Delegate Wallet 3/ Claiming the ERC6551 tokenbound from ETH -> SOL 4/ Interacting with the packs on Solana 5/ What to do with the cards/packs? 6/ Tips & Tricks

X doesn't warn you when you're talking to a scammer... But your browser can👀 The @RevokeCash extension labels many known scam accounts directly on X, helping you spot risky profiles before you interact with them.... It's one of the simplest security upgrades you can make. It won't catch every scammer, but avoiding even one malicious DM can make installing it worthwhile! Stay Safe & Stay Vigilant

Security audits shouldn't be expensive.. 🫡 Thanks to completing the Ethereum Security Grant through @thedaofund, I'm now able to offer subsidized security audits to a limited number of businesses!!!! I help teams Audit or Create secure: ✅ X (Twitter) ✅ Discord ✅ Telegram ✅ Multi-Sigs ✅ Implement/Audit Operational Practices ✅ Upcoming TGE security ✅ Team security training ✅ Brand protection ✅ Ongoing security consulting Every engagement includes practical recommendations designed to reduce the likelihood of account takeovers, phishing attacks, impersonation, and other common threats, not just a checklist. If you're preparing for a launch, managing a growing community, or want to strengthen your team's security, feel free to reach out!!! Stay Safe & Stay Vigilant