Attention please, attack on 0xPolygon is ongoing right now!

Users see an RPC error asking users to urgently reset their seed on polygonapp.net (looks like this is wether DNS hijack or a form of a supply chain attack).

Just a scam popup to bring you to a page to put your seed.

New attack vector discovered*
✅

* Bitcoin wallet Electrum has had this issue in the past - dishonest nodes phishing. First time on “modern chains”.

* Server certificate:
* subject: CN=polygon-rpc.com
* start date: Jul 1 07:39:10 2022 GMT (‼️)
* expire date: Sep 29 07:39:09 2022 GMT
* subjectAltName: host "polygon-rpc.com" matched cert's "polygon-rpc.com"
* issuer: C=US; O=Let's Encrypt; CN=R3

Very suspicious certificate, issued today by Let’sEncrypt

That’s a Polygon RPC related issue, hijack. Please do not go to this website and do not enter your seed there!!! Be smarter then hackers! You see someone’s insists on urgency - think twice.

Use your own RPCs. You can get one for free with POKTnetwork or AlchemyPlatform!

Literally the same attack is ongoing now on Fantom!

rpc.ftm.tools is having issues at the moment and should not be used.

If you're using that RPC, please change it to the following: rpc.ankr.com/fantom

It resolves to the same IP so this is the same hacker’s actions:

;; ANSWER SECTION:
rpc.ftm.tools. 78316 IN A 186.2.171.14

Stay Safe!

#blockchain #security #privacy