Share this article
Cointelegraph Hit by Front-End Exploit, Fake Phishing Airdrop Pop Up on Website
Fake CTG token pop-ups appeared on the crypto news website urging users to connect wallets.
Read the latest crypto news onCoinDesk
Jun 23, 2025, 5:27 a.m. 1 min read
What to know:
- Cointelegraph's website was compromised by a front-end exploit, leading to a malicious pop-up offering fake 'CoinTelegraph ICO Airdrops' and 'CTG tokens.'
- The fraudulent banner urged users to connect their crypto wallets, falsely promising $5,500 in tokens, and cited a bogus CertiK audit to appear legitimate.
- Cointelegraph warned users not to click on the pop-ups or provide personal information, as attackers have used similar tactics on other platforms like CoinMarketCap.
Crypto media outlet Cointelegraph has confirmed its website was compromised by a front-end exploit on Sunday, with attackers injecting a malicious pop-up that falsely claimed to offer “CoinTelegraph ICO Airdrops” and “CTG tokens.”
The fake banner urged readers to connect their crypto wallets in exchange for nearly $5,500 worth of tokens, citing a “fair launch” event and a bogus CertiK audit to lend legitimacy to the scam.
“Do not click on these pop-ups, connect your wallets, or enter any personal information,” Cointelegraph warned in a post on X, adding that it was “actively working on a fix.”
🚨 ALERT: We are aware of a fraudulent pop-up falsely claiming to offer “CoinTelegraph ICO Airdrops” or “CTG tokens” that are appearing on our site.
— Cointelegraph (@Cointelegraph) June 23, 2025
DO NOT:
- Click on these pop-ups
- Connect your wallets
- Enter any personal information
We are actively working on a fix.
Victims are typically tricked into connecting wallets for token claims, identity verification, or loyalty rewards — only to have their funds siphoned immediately after.
The tactic mirrors a nearly identical exploit on CoinMarketCap two days earlier, where attackers embedded similar code to serve wallet phishing prompts.
In both cases, the attack relied on hijacking trusted platforms to bypass user skepticism — turning news and data sites into unwitting vectors for wallet drainers.
Read more: CoinMarketCap Briefly Exploited With Wallet Phishing Pop-Up Message
Більше для вас
The product, called Base MCP, connects a user’s Base Account to AI clients such as ChatGPT, Claude and Cursor using the Model Context Protocol (MCP), an emerging standard that allows AI systems to securely interface with external tools and applications.
Що варто знати:
- Coinbase’s Ethereum Layer 2 network Base launched “Base MCP,” a new AI integration that lets users connect their crypto wallets to AI tools like ChatGPT and Claude to send funds, swap tokens, track portfolios and interact with DeFi apps using simple chat prompts.
- The product launches with integrations for protocols...
Top Stories
