Tim Beiko of the Ethereum Foundation confirmed a security breach involving their official email service, SendPulse, resulting in phishing emails sent to subscribers.
Hackers exploited SendPulse's vulnerabilities to gain unauthorised access and distribute fraudulent emails from updates@ethereum.org containing malicious links.
Beiko urged caution, advising users against clicking on suspicious links or opening attachments from compromised emails.
The Ethereum Foundation is collaborating with SendPulse to rectify the issue and enhance email security measures.
They have also provided guidance on identifying phishing scams to prevent further breaches, emphasising vigilance and direct communication through official channels for updates.