{"id":59719,"date":"2023-09-20T03:25:09","date_gmt":"2023-09-20T07:25:09","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=59719"},"modified":"2023-09-20T03:25:12","modified_gmt":"2023-09-20T07:25:12","slug":"celsius-creditors-alerted-to-new-phishing-threats-pre-bankruptcy","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/celsius-creditors-alerted-to-new-phishing-threats-pre-bankruptcy\/","title":{"rendered":"Celsius Creditors Alerted to New Phishing Threats Pre-Bankruptcy"},"content":{"rendered":"\n<p>Creditors of Celsius Network have reported receiving a new wave of <a href=\"https:\/\/coinscreed.com\/staging\/phishing-dangers-increase-as-celsius-acknowledges-client-emails-leak.html\" target=\"_blank\" rel=\"noreferrer noopener\">phishing emails,<\/a> most likely due to the 2017 Data breach.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"597\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/Celsius-1024x597.jpg\" alt=\"\" class=\"wp-image-59721\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/Celsius-1024x597.jpg 1024w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/Celsius-300x175.jpg 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/Celsius-768x448.jpg 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/Celsius-750x438.jpg 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/Celsius-1140x665.jpg 1140w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/Celsius.jpg 1200w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Celsius Creditors Alerted to New Phishing Threats Pre-Bankruptcy<\/figcaption><\/figure>\n\n\n\n<p>Creditors of the defunct cryptocurrency lender Celsius Network are once again the target of a new surge of phishing attacks as the lender's bankruptcy proceedings near their conclusion.<\/p>\n\n\n\n<p>In the past week, social media reports have indicated increased phishing attacks by fraudsters posing as Stretto, the insolvency services platform for cryptocurrency lender Celsius and its creditors. On September 18, one user reported receiving three fraudulent emails purporting to be from Celsius.<\/p>\n\n\n\n<p>Others reported receiving phishing emails containing malicious links impersonating <a href=\"https:\/\/www.stretto.com\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Stretto,<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a> the claims agent overseeing the bankruptcy case.<\/p>\n\n\n\n<blockquote class=\"twitter-tweet\"><p lang=\"en\" dir=\"ltr\">Beware of scam email (I received this phishing email -&gt; the scam link shown is &quot;case-stretto. com&quot;, not &quot;<a href=\"https:\/\/t.co\/ZGKIKrPjl1\" target=\"_blank\">https:\/\/t.co\/ZGKIKrPjl1<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a>&quot;) <a href=\"https:\/\/t.co\/JV7yUQ6X5e\" target=\"_blank\">https:\/\/t.co\/JV7yUQ6X5e<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/p>&mdash; Better World (@Scam_is_sinful) <a href=\"https:\/\/twitter.com\/Scam_is_sinful\/status\/1703673058085716245?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">September 18, 2023<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote> \n\n\n\n<p>The false website, which omits an's' from the legitimate URL, displays a connect wallet prompt that, when clicked, enables the scammers to steal the victim's crypto assets.<\/p>\n\n\n\n<p>One analyst and business manager predicted that phishing attacks would increase as the conclusion of the Celsius bankruptcy proceedings approached. He suggested taking precautions and verifying all links.<\/p>\n\n\n\n<blockquote class=\"twitter-tweet\"><p lang=\"en\" dir=\"ltr\">I expect phishing attempts to only increase as the celsius ch.11 approaches what appears to be the final stages. Creditors will be eager to make any final last-minute changes or confirm any alleged distributions. Be extremely cautious, links are bad, and take precautions.<\/p>&mdash; Keith (@ChazzonKe) <a href=\"https:\/\/twitter.com\/ChazzonKe\/status\/1703845270922932344?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">September 18, 2023<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote> \n\n\n\n<p>Celsius was authorized to ship out voting ballots to its customers in mid-August for a vote on a proposed settlement plan. Swindlers are utilizing this to intensify their phishing assaults around the election deadline.<\/p>\n\n\n\n<p>According to Simon Dixon, CEO and co-founder of the online investment platform BnkToTheFuture, the final date for voting was September 18, with the report and confirmation hearing scheduled for September 20 and September 29, respectively. On October 2, Celsius plans to seek ultimate court approval of its restructuring plan.<\/p>\n\n\n\n<blockquote class=\"twitter-tweet\"><p lang=\"en\" dir=\"ltr\">The <a href=\"https:\/\/twitter.com\/BankToTheFuture?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">@BankToTheFuture<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> Investment Banking team have been working on some models to help <a href=\"https:\/\/twitter.com\/hashtag\/Celsius?src=hash&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">#Celsius<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> Creditors vote on the disclosure statement that I\u2019ll share on YouTube soon. For now our team has put together a timetable of important events leading up to plan conformation. \ud83d\ude4f <a href=\"https:\/\/t.co\/3dQduMAofP\" target=\"_blank\">pic.twitter.com\/3dQduMAofP<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/p>&mdash; Simon Dixon (@SimonDixonTwitt) <a href=\"https:\/\/twitter.com\/SimonDixonTwitt\/status\/1679064454560980994?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">July 12, 2023<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote> \n\n\n\n<p>The phishing attacks originated from prior data breaches, such as a Celsius Network email server intrusion in April 2021 that resulted in the disclosure of user information, which led to the sending of malicious emails to those users.<\/p>\n\n\n\n<p>In July 2022, the troubled <a href=\"https:\/\/coinscreed.com\/staging\/crypto-lender-geist-finance-shuts-down-permanently.html\" target=\"_blank\" rel=\"noreferrer noopener\">crypto lender <\/a>disclosed that additional customer data had been compromised in a third-party data breach, leading to a new surge of phishing attacks.<\/p>\n\n\n\n<p>Since Celsius discontinued withdrawals in June 2022, following the collapse of the Terra\/Luna ecosystem, customers of the crypto lender have been awaiting reimbursement. The cryptocurrency lender declared bankruptcy the subsequent month.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Creditors of Celsius Network have reported receiving a new wave of phishing emails, most likely due to the 2017 Data breach. Creditors of the defunct cryptocurrency lender Celsius Network are once again the target of a new surge of phishing attacks as the lender&#8217;s bankruptcy proceedings near their conclusion. In the past week, social media [&hellip;]<\/p>\n","protected":false},"author":53,"featured_media":59721,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[21,32],"tags":[14818,16209,7184,6370],"class_list":["post-59719","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-crypto-exchange-news","tag-bankcruptcy","tag-celsius-network-2","tag-phishing","tag-scams"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/Celsius.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/59719","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/53"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=59719"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/59719\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/59721"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=59719"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=59719"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=59719"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}