CoinMarketCap detects and removes dozens of scam wallets

CoinMarketCap, a cryptocurrency price tracking website, has just announced that it has removed a malicious code from its website after a fake popup appeared requesting users to verify their cryptocurrency wallet - according to the post on its official X account. "We have identified and removed the malicious code from the website," CoinMarketCap wrote. "Our team continues to investigate and take steps to enhance security." This update came less than three hours after CoinMarketCap publicly acknowledged the incident, amid widespread social media warnings about suspicious popups. Previously, CoinMarketCap stated: "We have detected a malicious popup appearing on the website, requesting users to 'Verify wallet'." Many X users believed this popup was a phishing scam - a common cryptocurrency fraud aimed at stealing private keys or personal information by impersonating a reputable service. Users with MetaMask and Phantom wallets quickly identified the issue. A user named Jet reported that both wallets had flagged warnings. Browsers with Phantom wallet installed now display a message that the CoinMarketCap site is "unsafe to use". This incident occurred nearly 4 years after CoinMarketCap was attacked in October 2021, which resulted in over 3.1 million user email addresses being leaked. These addresses were subsequently sold on various hacker forums and published by Have I Been Pwned - a website specializing in tracking data breaches.