PoisonSeed campaign hijacks business CRM and email accounts to send out huge amounts of spam

• Hackers are targeting business CRM accounts to steal mailing lists
• Emails used to send spam and trick people into setting up compromised crypto wallets
• The goal is to steal the money, so be on your guard

Hackers are stealing mailing lists from major companies and using them to break into people’s cryptocurrency wallets and snatch their funds.

A new report from cybersecurity researchers Silent Push, who dubbed the campaign ‘PoisonSeed’, outlined how the criminals first set up spoofed landing pages for companies such as Coinbase, Ledger, Mailchimp, SendGrid, Hubspot, and others. They harvest people’s login credentials, which allow cybercriminals to log into mailing service accounts and exfiltrate any mailing lists.