BleepingComputer reports that Mercku, a Canadian company that makes wireless networking equipment has been hacked. Because of this, their helpdesk is sending fake emails to people who ask for support.
When someone submits a support ticket on Mercku’s helpdesk they quickly get an email with the subject “Metamask: Mandatory Metamask Account Update Required.” The email tells people they need to update their MetaMask cryptocurrency wallet information within 24 hours or they will lose access to their account. However the email contains a phishing link that looks like it goes to “metamask.io,” but it actually redirects to a fake site.
The fake link redirects people to “hxxps://matjercasa.youcan[.]store” but this site has been shut down to stop the phishing attacks according to BleepingComputer.
People using Mercku’s services should avoid using the helpdesk portal and should not trust emails from it.
